December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2655-1: moderate: Security update for calamares
by opensuse-security＠opensuse.org 09 Dec '19

09 Dec '19

openSUSE Security Update: Security update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2655-1 Rating: moderate References: #1140256 #1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for calamares fixes the following issues: - Launch with "pkexec calamares" in openSUSE Tumbleweed, but launch with "xdg-su -c calamares" in openSUSE Leap 15. Update to Calamares 3.2.15: - "displaymanager" module now treats "sysconfig" as a regular entry in the "displaymanagers" list, and the "sysconfigSetup" key is used as a shorthand to force only that entry in the list. - "machineid" module has been re-written in C++ and extended with a new configuration key to generate urandom pool data. - "unpackfs" now supports a special "sourcefs" value of file for copying single files (optionally with renaming) or directory trees to the target system. - "unpackfs" now support an "exclude" and "excludeFile" setting for excluding particular files or patters from unpacking. Update to Calamares 3.2.14: - "locale" module no longer recognizes the legacy GeoIP configuration. This has been deprecated since Calamares 3.2.8 and is now removed. - "packagechooser" module can now be custom-labeled in the overall progress (left-hand column). - "displaymanager" module now recognizes KDE Plasma 5.17. - "displaymanager" module now can handle Wayland sessions and can detect sessions from their .desktop files. - "unpackfs" now has special handling for sourcefs setting “file”. Update to Calamares 3.2.13. More about upstream changes: https://calamares.io/calamares-3.2.13-is-out/ and https://calamares.io/calamares-3.2.12-is-out/ Update to Calamares 3.2.11: - Fix race condition in modules/luksbootkeyfile/main.py (boo#1140256, CVE-2019-13178) - more about upstream changes in 3.2 versions can be found in https://calamares.io/ and https://github.com/calamares/calamares/releases This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2655=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): calamares-3.2.15-bp151.4.3.1 calamares-webview-3.2.15-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): calamares-branding-upstream-3.2.15-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-13178.html https://bugzilla.suse.com/1140256 https://bugzilla.suse.com/1152377

1 0

openSUSE-RU-2019:2652-1: important: Recommended update for ceph, openSUSE-release-tools
by maintenance＠opensuse.org 09 Dec '19

09 Dec '19

openSUSE Recommended Update: Recommended update for ceph, openSUSE-release-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2652-1 Rating: important References: #1156282 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ceph fixes the following issue: - A previous update introduced a regression with the potential to cause RocksDB data corruption in Nautilus (bsc#1156282). Also openSUSE-release-tools is included in this update, to align permissions of /etc/grafana between ceph and openSUSE-release-tools. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2652=1 Package List: - openSUSE Leap 15.1 (x86_64): ceph-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-base-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-base-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-common-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-common-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-debugsource-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-fuse-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-fuse-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mds-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mds-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mon-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mon-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-osd-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-osd-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-radosgw-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-radosgw-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-resource-agents-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-test-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-test-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-test-debugsource-14.2.4.386+g73475e3ee1-lp151.2.4.1 cephfs-shell-14.2.4.386+g73475e3ee1-lp151.2.4.1 libcephfs-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 libcephfs2-14.2.4.386+g73475e3ee1-lp151.2.4.1 libcephfs2-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 librados-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 librados-devel-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 librados2-14.2.4.386+g73475e3ee1-lp151.2.4.1 librados2-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 libradospp-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 libradosstriper-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 libradosstriper1-14.2.4.386+g73475e3ee1-lp151.2.4.1 libradosstriper1-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 librbd-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 librbd1-14.2.4.386+g73475e3ee1-lp151.2.4.1 librbd1-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 librgw-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 librgw2-14.2.4.386+g73475e3ee1-lp151.2.4.1 librgw2-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-ceph-argparse-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-cephfs-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-cephfs-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rados-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rados-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rbd-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rbd-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rgw-14.2.4.386+g73475e3ee1-lp151.2.4.1 python3-rgw-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 rados-objclass-devel-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-fuse-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-fuse-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-mirror-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-mirror-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-nbd-14.2.4.386+g73475e3ee1-lp151.2.4.1 rbd-nbd-debuginfo-14.2.4.386+g73475e3ee1-lp151.2.4.1 - openSUSE Leap 15.1 (noarch): ceph-dashboard-e2e-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-grafana-dashboards-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-dashboard-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-diskprediction-cloud-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-diskprediction-local-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-rook-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-mgr-ssh-14.2.4.386+g73475e3ee1-lp151.2.4.1 ceph-prometheus-alerts-14.2.4.386+g73475e3ee1-lp151.2.4.1 openSUSE-release-tools-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-abichecker-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-announcer-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-check-source-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-devel-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-leaper-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-maintenance-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-metrics-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-metrics-access-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-obs-operator-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-origin-manager-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-pkglistgen-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-repo-checker-20191129.411c0452-lp151.2.6.1 openSUSE-release-tools-staging-bot-20191129.411c0452-lp151.2.6.1 osc-plugin-cycle-20191129.411c0452-lp151.2.6.1 osc-plugin-origin-20191129.411c0452-lp151.2.6.1 osc-plugin-staging-20191129.411c0452-lp151.2.6.1 osclib-20191129.411c0452-lp151.2.6.1 References: https://bugzilla.suse.com/1156282

1 0

openSUSE-RU-2019:2651-1: Fix CVE-2019-19118 (boo#1157705)
by maintenance＠opensuse.org 08 Dec '19

08 Dec '19

openSUSE Recommended Update: Fix CVE-2019-19118 (boo#1157705) ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2651-1 Rating: low References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: Fix CVE-2019-19118 (boo#1157705) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2651=1 Package List: - openSUSE Leap 15.1 (noarch): python3-Django-2.2.8-lp151.2.6.1 References:

1 0

openSUSE-RU-2019:2650-1: moderate: Recommended update for gnome-software
by maintenance＠opensuse.org 08 Dec '19

08 Dec '19

openSUSE Recommended Update: Recommended update for gnome-software ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2650-1 Rating: moderate References: #1151237 #941862 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gnome-software provides the following fixes: - Ship gnome-software-local-file.desktop after previous bug been fixed. (bsc#941862, bsc#1151237). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2650=1 Package List: - openSUSE Leap 15.1 (noarch): gnome-software-lang-3.26.7-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): gnome-software-3.26.7-lp151.6.3.1 gnome-software-debuginfo-3.26.7-lp151.6.3.1 gnome-software-debugsource-3.26.7-lp151.6.3.1 gnome-software-devel-3.26.7-lp151.6.3.1 References: https://bugzilla.suse.com/1151237 https://bugzilla.suse.com/941862

1 0

openSUSE-RU-2019:2648-1: moderate: Recommended update for python-pep8
by maintenance＠opensuse.org 07 Dec '19

07 Dec '19

openSUSE Recommended Update: Recommended update for python-pep8 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2648-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-pep8 fixes the following issues: - Fix test failures with more recent versions of Python (gh#PyCQA/pycodestyle#786 and gh#PyCQA/pycodestyle#801) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2648=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2648=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-pep8-1.7.0-bp151.4.3.1 python3-pep8-1.7.0-bp151.4.3.1 - openSUSE Backports SLE-15 (noarch): python2-pep8-1.7.0-bp150.3.3.1 python3-pep8-1.7.0-bp150.3.3.1 References:

1 0

openSUSE-RU-2019:2649-1: moderate: Recommended update for gnuhealth-thalamus
by maintenance＠opensuse.org 07 Dec '19

07 Dec '19

openSUSE Recommended Update: Recommended update for gnuhealth-thalamus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2649-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for gnuhealth-thalamus fixes the following issues: Version 0.9.11 update. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2649=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): gnuhealth-thalamus-0.9.11-bp151.2.6.1 References:

1 0

openSUSE-RU-2019:2647-1: moderate: Recommended update for python
by maintenance＠opensuse.org 06 Dec '19

06 Dec '19

openSUSE Recommended Update: Recommended update for python ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2647-1 Rating: moderate References: #1149792 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python fixes the following issues: - Skipping tests for failing build with OpenSSL 1.1.1c. (bpo#36576, bsc#1149792) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2647=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpython2_7-1_0-2.7.14-lp151.10.13.2 libpython2_7-1_0-debuginfo-2.7.14-lp151.10.13.2 python-2.7.14-lp151.10.13.1 python-base-2.7.14-lp151.10.13.2 python-base-debuginfo-2.7.14-lp151.10.13.2 python-base-debugsource-2.7.14-lp151.10.13.2 python-curses-2.7.14-lp151.10.13.1 python-curses-debuginfo-2.7.14-lp151.10.13.1 python-debuginfo-2.7.14-lp151.10.13.1 python-debugsource-2.7.14-lp151.10.13.1 python-demo-2.7.14-lp151.10.13.1 python-devel-2.7.14-lp151.10.13.2 python-gdbm-2.7.14-lp151.10.13.1 python-gdbm-debuginfo-2.7.14-lp151.10.13.1 python-idle-2.7.14-lp151.10.13.1 python-tk-2.7.14-lp151.10.13.1 python-tk-debuginfo-2.7.14-lp151.10.13.1 python-xml-2.7.14-lp151.10.13.2 python-xml-debuginfo-2.7.14-lp151.10.13.2 - openSUSE Leap 15.1 (x86_64): libpython2_7-1_0-32bit-2.7.14-lp151.10.13.2 libpython2_7-1_0-32bit-debuginfo-2.7.14-lp151.10.13.2 python-32bit-2.7.14-lp151.10.13.1 python-32bit-debuginfo-2.7.14-lp151.10.13.1 python-base-32bit-2.7.14-lp151.10.13.2 python-base-32bit-debuginfo-2.7.14-lp151.10.13.2 - openSUSE Leap 15.1 (noarch): python-doc-2.7.14-lp151.10.13.1 python-doc-pdf-2.7.14-lp151.10.13.1 References: https://bugzilla.suse.com/1149792

1 0

openSUSE-RU-2019:2646-1: moderate: Recommended update for drbd-formula, habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula, salt
by maintenance＠opensuse.org 05 Dec '19

05 Dec '19

openSUSE Recommended Update: Recommended update for drbd-formula, habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula, salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2646-1 Rating: moderate References: #1101780 #1130588 #1134860 #1135567 #1135732 #1137642 #1137989 #1140912 #1142306 #1142762 #1143301 #1146192 #1146382 #1151650 #1151947 #1152366 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 16 recommended fixes can now be installed. Description: This update for drbd-formula, habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula and salt fixes the following issues: habootstrap-formula 0.2.9: * Fix issue with file permissions during package installation in /usr/share/salt-formulas (0755, root, salt) (boo#1142306) * Add customizable timeout to the join process and rename join_timer to wait_for_initialization * remove and replace hawk-apiserver with prometheus-ha_cluster_exporter pkg * Update the pkg.info_available call to avoid repositories refresh as it may cause errors * Add packages and ha_exporter options to the SUMA form.yml file * Fix typo in Pillar attribute name * Add HA monitoring to the formula salt-shaptools 0.2.3: - Create package version 0.2.3 with drbd files renamed. - Create package version 0.2.2 updating how additional_dvds is used in netweavermod - Create first salt modules and states to manage SAP Netweaver * Install ASCS SAP instance in a idempotent way python-shaptools 0.3.3: - Add update_conf_file for Netweaver - Add isconnected and reconnect methods - Add the required code to install SAP Netweaver instances * Wrap sapcontrol command usage * Install and uninstall SAP instances * Check current installation status - Add support for Power machines (jsc#SLE-4031, jsc#SLE-4143, boo#1137989) saphanabootstrap-formula 0.3.2: * Fix issue with file permissions during package installation in /usr/share/salt-formulas (0755, root, salt) (boo#1142306) * Fix 'true' rendering in jinja to convert to json correctly * Add support for multi tenant hanadb_exporter * Update the pkg.info_available call to avoid repositories refresh as it may cause errors * Fix issue with file permissions during package installation in /usr/share/salt-formulas (0755, root, salt) (boo#1142306) drbd-formula 0.3.7: * Retry the packages installation to make the code more robust * Remove additional_repos salt state * Fix issue with file permissions during package installation in /usr/share/salt-formulas (0755, root, salt) (boo#1142306) * Remove the duplicate default value in salt state * Not to install package by default * Remove salt indent and change the order of pillar * Add prefix to ID to avoid conflicts * Install xfsprogs when need to format xfs - Version 0.3.2, boo#1142762 * Restructure the deploy and examples directories * Add examples of using NFS formula * Fix the issue of mkfs and mount NFS share * Polish the form.yml based on SUMA4.0, change some default values. - Version 0.3.1 * Change the requires to salt-formulas-configuration as this is the virtual "provides" shared by salt and SUMA to guarantee that the formula works integrated with both (not at the same time). (boo#1142306) * Change the directory permission to avoid file conflicts with SUMA. - Version 0.3.0, jsc#SLE-6970 * Move to SUSE org * Add SUSE manager support - Version 0.2.2 * Support make file system after initialization * Support mount to specific folder * Add habootstrap-formula pillar/tempalte - Version 0.2.1 * Polish the README * Add travis file for auto package to obs * Change node names in example * Modify state ID to avoid conflict of other formulas - Version 0.2.0 * Add description in pillar.example. * Support more parameters in global_common.conf * Fix bugs in initial sync. * Add promote/demote state. * Use grains['host'] for primary node. salt for openSUSE Leap 15.1 received the following fixes: - Add missing 'fun' on events coming from salt-ssh wfunc executions (bsc#1151947) - Fix failing unit tests for batch async - Fix memory consumption problem on BatchAsync (bsc#1137642) - Remove wrong %endif on spec file - fix dependencies for RHEL 8 - Differentiating between markupsafe and MarkupSafe for Python3 - Prevent systemd-run description issue when running aptpkg (bsc#1152366) - Take checksums arg into account for postgres.datadir_init (bsc#1151650) - Improve batch_async to release consumed memory (bsc#1140912) - Require shadow instead of old pwdutils (bsc#1130588) - Conflict with tornado >= 5; for now we can only cope with Tornado 4.x (bsc#1101780). - Fix virt.full_info (bsc#1146382) - virt.volume_infos: silence libvirt error message - virt.volume_infos needs to ignore inactive pools - Fix for various bugs in virt network and pool states - Implement network.fqdns module function (bsc#1134860) - Strip trailing "/" from repo.uri when comparing repos in apktpkg.mod_repo (bsc#1146192) - Make python3 default for RHEL8 - Use python3 to build package Salt for RHEL8 - Fix aptpkg systemd call (bsc#1143301) - Move server_id deprecation warning to reduce log spamming (bsc#1135567) (bsc#1135732) salt was imported from the SUSE:SLE-15-SP1:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2646=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2646=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): habootstrap-formula-0.2.9-bp151.8.1 python2-shaptools-0.3.3-bp151.8.1 python3-shaptools-0.3.3-bp151.8.1 saphanabootstrap-formula-0.3.2-bp151.8.1 - openSUSE Backports SLE-15 (noarch): habootstrap-formula-0.2.9-bp150.8.1 python2-shaptools-0.3.3-bp150.8.1 python3-shaptools-0.3.3-bp150.8.1 saphanabootstrap-formula-0.3.2-bp150.8.1 References: https://bugzilla.suse.com/1101780 https://bugzilla.suse.com/1130588 https://bugzilla.suse.com/1134860 https://bugzilla.suse.com/1135567 https://bugzilla.suse.com/1135732 https://bugzilla.suse.com/1137642 https://bugzilla.suse.com/1137989 https://bugzilla.suse.com/1140912 https://bugzilla.suse.com/1142306 https://bugzilla.suse.com/1142762 https://bugzilla.suse.com/1143301 https://bugzilla.suse.com/1146192 https://bugzilla.suse.com/1146382 https://bugzilla.suse.com/1151650 https://bugzilla.suse.com/1151947 https://bugzilla.suse.com/1152366

1 0

openSUSE-RU-2019:2641-1: moderate: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 04 Dec '19

04 Dec '19

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2641-1 Rating: moderate References: #1157783 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheets fixes the following issues: - Fix old documentation link to add https protocol. (bsc#1157783) - Fix for SUSE XSL stylesheets. (bsc#1157783) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2641=1 Package List: - openSUSE Leap 15.1 (noarch): suse-xsl-stylesheets-2.0.15-lp151.2.3.1 References: https://bugzilla.suse.com/1157783

1 0

openSUSE-SU-2019:2645-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 04 Dec '19

04 Dec '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2645-1 Rating: important References: #1082318 #1154980 #1157712 #1157714 Cross-References: CVE-2019-18277 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the "chunked" (bsc#1154980). - Fixed an improper handling of headers which could have led to injecting LFs in H2-to-H1 transfers creating new attack space (bsc#1157712) - Fixed an issue where HEADER frames in idle streams are not rejected and thus trying to decode them HAPrpxy crashes (bsc#1157714). Other issue addressed: - Macro change in the spec file (bsc#1082318) More information regarding the release at: http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95d aae20954b3053ce87e This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2645=1 Package List: - openSUSE Leap 15.1 (x86_64): haproxy-2.0.10+git0.ac198b92-lp151.2.6.1 haproxy-debuginfo-2.0.10+git0.ac198b92-lp151.2.6.1 haproxy-debugsource-2.0.10+git0.ac198b92-lp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-18277.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1154980 https://bugzilla.suse.com/1157712 https://bugzilla.suse.com/1157714

1 0