December 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2633-1: moderate: Security update for cloud-init
by opensuse-security＠opensuse.org 04 Dec '19

04 Dec '19

openSUSE Security Update: Security update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2633-1 Rating: moderate References: #1099358 #1129124 #1136440 #1142988 #1144363 #1151488 #1154092 Cross-References: CVE-2019-0816 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for cloud-init to version 19.2 fixes the following issues: Security issue fixed: - CVE-2019-0816: Fixed the unnecessary extra ssh keys that were added to authorized_keys (bsc#1129124). Non-security issues fixed: - Short circuit the conditional for identifying the sysconfig renderer (bsc#1154092, bsc#1142988). - If /etc/resolv.conf is a symlink, break it. This will avoid netconfig from clobbering the changes cloud-init applied (bsc#1151488). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2633=1 Package List: - openSUSE Leap 15.1 (x86_64): cloud-init-19.2-lp151.2.9.1 cloud-init-config-suse-19.2-lp151.2.9.1 cloud-init-doc-19.2-lp151.2.9.1 References: https://www.suse.com/security/cve/CVE-2019-0816.html https://bugzilla.suse.com/1099358 https://bugzilla.suse.com/1129124 https://bugzilla.suse.com/1136440 https://bugzilla.suse.com/1142988 https://bugzilla.suse.com/1144363 https://bugzilla.suse.com/1151488 https://bugzilla.suse.com/1154092

1 0

openSUSE-RU-2019:2617-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2617-1 Rating: moderate References: #1042123 #1129631 #1129986 #1132280 #1132326 #1132774 #1132977 #1136034 #1140117 #1142214 #1142670 #1143182 #1150183 #1150972 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 14 recommended fixes can now be installed. Description: This update for wicked fixes the following issues: - dhcp6: Add an address-length (DHCLIENT6_ADDRESS_LENGTH) ifcfg option, which allows to specify an explicit prefix-length to use for the DHCPv6 address and override detection using RA prefix info and a default to /128. Previously the default value was set to a /64 address prefix-length. (bsc#1132280) - time: Use boot time for timer instead of real time to avoid getting stuck when bringing up the network. (bsc#1129986) - systemd: Change the service to depend on udev settle service as calling udevadm settle directly caused systemd to kill wicked services. (bsc#1136034, bsc#1132774) - bridge: Honor ifcfg LLADDR and set link address. (bsc#1042123, bsc#1142670) - rfkill: Fix an issue where wicked was unable to set up the Wifi module. (bsc#1140117) - dhcp4: Fix an intermittent hang during network setup by cleaning up the defer timer pointer when timeout. (bsc#1142214) - dhcp4: Make sure custom routing options are respected. (bsc#1132326) - dhcp6: Initial support to request prefix for delegations. (jsc#SLE-5936) - dhcp6: Set the noprefixroute address option. (bsc#1132280) - dhcp6: Omit noprefixroute with address-length. Allow to assume that the address prefix-length override specified in the config is a valid on-link prefix length, to let the kernel create a route for this prefix. (bsc#1150972) - dhcp6: Differentiated mode=auto resolving from RA. Fix to not trigger n error when ipv6 RA is not available or the received RA disables dhcp while mode is set to auto, but to deliver a 'deferred' result. (bsc#1150183) - libwicked: Fix versioning and packaging by shipping the internal helper library inside the wicked package itself. (bsc#1143182, bsc#1132977) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2617=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): wicked-0.6.60-lp150.2.13.1 wicked-debuginfo-0.6.60-lp150.2.13.1 wicked-debugsource-0.6.60-lp150.2.13.1 wicked-service-0.6.60-lp150.2.13.1 References: https://bugzilla.suse.com/1042123 https://bugzilla.suse.com/1129631 https://bugzilla.suse.com/1129986 https://bugzilla.suse.com/1132280 https://bugzilla.suse.com/1132326 https://bugzilla.suse.com/1132774 https://bugzilla.suse.com/1132977 https://bugzilla.suse.com/1136034 https://bugzilla.suse.com/1140117 https://bugzilla.suse.com/1142214 https://bugzilla.suse.com/1142670 https://bugzilla.suse.com/1143182 https://bugzilla.suse.com/1150183 https://bugzilla.suse.com/1150972

1 0

openSUSE-RU-2019:2630-1: moderate: Recommended update for man-pages
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for man-pages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2630-1 Rating: moderate References: #1154701 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for man-pages fixes the following issues: - Correct documentation of 'tcp_fack'. (bsc#1154701) - Add documentation 'tcp_recovery'. (bsc#1154701) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2630=1 Package List: - openSUSE Leap 15.1 (noarch): man-pages-4.16-lp151.4.3.1 References: https://bugzilla.suse.com/1154701

1 0

openSUSE-RU-2019:2622-1: moderate: Recommended update for csync2
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for csync2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2622-1 Rating: moderate References: #1145032 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for csync2 fixes the following issues: - Fix for the wrong/false TLS key generation on installation, and show the output during generetion sequence. (bsc#1145032) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2622=1 Package List: - openSUSE Leap 15.0 (x86_64): csync2-2.0+git.1461714863.10636a4-lp150.2.3.1 csync2-debuginfo-2.0+git.1461714863.10636a4-lp150.2.3.1 csync2-debugsource-2.0+git.1461714863.10636a4-lp150.2.3.1 References: https://bugzilla.suse.com/1145032

1 0

openSUSE-RU-2019:2616-1: moderate: Recommended update for e2fsprogs
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for e2fsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2616-1 Rating: moderate References: #1154295 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for e2fsprogs fixes the following issues: - Make minimum size estimates more reliable for mounted filesystem. (bsc#1154295) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2616=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): e2fsprogs-1.43.8-lp150.14.1 e2fsprogs-debuginfo-1.43.8-lp150.14.1 e2fsprogs-debugsource-1.43.8-lp150.14.1 e2fsprogs-devel-1.43.8-lp150.14.1 libcom_err-devel-1.43.8-lp150.14.1 libcom_err-devel-static-1.43.8-lp150.14.1 libcom_err2-1.43.8-lp150.14.1 libcom_err2-debuginfo-1.43.8-lp150.14.1 libext2fs-devel-1.43.8-lp150.14.1 libext2fs-devel-static-1.43.8-lp150.14.1 libext2fs2-1.43.8-lp150.14.1 libext2fs2-debuginfo-1.43.8-lp150.14.1 - openSUSE Leap 15.0 (x86_64): e2fsprogs-32bit-debuginfo-1.43.8-lp150.14.1 libcom_err-devel-32bit-1.43.8-lp150.14.1 libcom_err2-32bit-1.43.8-lp150.14.1 libcom_err2-32bit-debuginfo-1.43.8-lp150.14.1 libext2fs-devel-32bit-1.43.8-lp150.14.1 libext2fs2-32bit-1.43.8-lp150.14.1 libext2fs2-32bit-debuginfo-1.43.8-lp150.14.1 References: https://bugzilla.suse.com/1154295

1 0

openSUSE-SU-2019:2628-1: moderate: Security update for calamares
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for calamares ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2628-1 Rating: moderate References: #1140256 #1152377 Cross-References: CVE-2019-13178 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for calamares fixes the following issues: - Launch with "pkexec calamares" in openSUSE Tumbleweed, but launch with "xdg-su -c calamares" in openSUSE Leap 15. Update to Calamares 3.2.15: - "displaymanager" module now treats "sysconfig" as a regular entry in the "displaymanagers" list, and the "sysconfigSetup" key is used as a shorthand to force only that entry in the list. - "machineid" module has been re-written in C++ and extended with a new configuration key to generate urandom pool data. - "unpackfs" now supports a special "sourcefs" value of file for copying single files (optionally with renaming) or directory trees to the target system. - "unpackfs" now support an "exclude" and "excludeFile" setting for excluding particular files or patters from unpacking. Update to Calamares 3.2.14: - "locale" module no longer recognizes the legacy GeoIP configuration. This has been deprecated since Calamares 3.2.8 and is now removed. - "packagechooser" module can now be custom-labeled in the overall progress (left-hand column). - "displaymanager" module now recognizes KDE Plasma 5.17. - "displaymanager" module now can handle Wayland sessions and can detect sessions from their .desktop files. - "unpackfs" now has special handling for sourcefs setting “file”. Update to Calamares 3.2.13. More about upstream changes: https://calamares.io/calamares-3.2.13-is-out/ and https://calamares.io/calamares-3.2.12-is-out/ Update to Calamares 3.2.11: - Fix race condition in modules/luksbootkeyfile/main.py (boo#1140256, CVE-2019-13178) - more about upstream changes in 3.2 versions can be found in https://calamares.io/ and https://github.com/calamares/calamares/releases Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2628=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2628=1 Package List: - openSUSE Leap 15.1 (x86_64): calamares-3.2.15-lp151.4.3.3 calamares-debuginfo-3.2.15-lp151.4.3.3 calamares-debugsource-3.2.15-lp151.4.3.3 calamares-webview-3.2.15-lp151.4.3.3 calamares-webview-debuginfo-3.2.15-lp151.4.3.3 - openSUSE Leap 15.1 (noarch): calamares-branding-upstream-3.2.15-lp151.4.3.3 - openSUSE Leap 15.0 (x86_64): calamares-3.2.15-lp150.7.2 calamares-debuginfo-3.2.15-lp150.7.2 calamares-debugsource-3.2.15-lp150.7.2 calamares-webview-3.2.15-lp150.7.2 calamares-webview-debuginfo-3.2.15-lp150.7.2 - openSUSE Leap 15.0 (noarch): calamares-branding-upstream-3.2.15-lp150.7.2 References: https://www.suse.com/security/cve/CVE-2019-13178.html https://bugzilla.suse.com/1140256 https://bugzilla.suse.com/1152377

1 0

openSUSE-RU-2019:2625-1: moderate: Recommended update for sysstat
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2625-1 Rating: moderate References: #1144923 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysstat fixes the following issues: - Enable log information of starting/stoping services. (bsc#1144923, jsc#SLE-5958) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2625=1 Package List: - openSUSE Leap 15.0 (x86_64): sysstat-12.0.2-lp150.19.1 sysstat-debuginfo-12.0.2-lp150.19.1 sysstat-debugsource-12.0.2-lp150.19.1 sysstat-isag-12.0.2-lp150.19.1 References: https://bugzilla.suse.com/1144923

1 0

openSUSE-RU-2019:2614-1: moderate: Recommended update for man-pages
by maintenance＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Recommended Update: Recommended update for man-pages ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2614-1 Rating: moderate References: #1154701 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for man-pages fixes the following issues: - Correct documentation of 'tcp_fack'. (bsc#1154701) - Add documentation 'tcp_recovery'. (bsc#1154701) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2614=1 Package List: - openSUSE Leap 15.0 (noarch): man-pages-4.16-lp150.2.4.1 References: https://bugzilla.suse.com/1154701

1 0

openSUSE-SU-2019:2626-1: important: Security update for haproxy
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for haproxy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2626-1 Rating: important References: #1082318 #1154980 #1157712 #1157714 Cross-References: CVE-2019-18277 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for haproxy to version 2.0.10 fixes the following issues: HAProxy was updated to 2.0.10 Security issues fixed: - CVE-2019-18277: Fixed a potential HTTP smuggling in messages with transfer-encoding header missing the "chunked" (bsc#1154980). - Fixed an improper handling of headers which could have led to injecting LFs in H2-to-H1 transfers creating new attack space (bsc#1157712) - Fixed an issue where HEADER frames in idle streams are not rejected and thus trying to decode them HAPrpxy crashes (bsc#1157714). Other issue addressed: - Macro change in the spec file (bsc#1082318) More information regarding the release at: http://git.haproxy.org/?p=haproxy-2.0.git;a=commit;h=ac198b92d461515551b95d aae20954b3053ce87e This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2626=1 Package List: - openSUSE Leap 15.0 (x86_64): haproxy-2.0.10+git0.ac198b92-lp150.2.16.1 haproxy-debuginfo-2.0.10+git0.ac198b92-lp150.2.16.1 haproxy-debugsource-2.0.10+git0.ac198b92-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-18277.html https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1154980 https://bugzilla.suse.com/1157712 https://bugzilla.suse.com/1157714

1 0

openSUSE-SU-2019:2632-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 03 Dec '19

03 Dec '19

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2632-1 Rating: moderate References: #1120653 #1120654 #1124341 #1124342 #1155079 Cross-References: CVE-2018-1000877 CVE-2018-1000878 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for libarchive fixes the following issues: Security issues fixed: - CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653). - CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654). - CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341). - CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342). - CVE-2019-18408: Fixed a use-after-free in RAR format support (bsc#1155079). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2632=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bsdtar-3.3.2-lp151.5.3.1 bsdtar-debuginfo-3.3.2-lp151.5.3.1 libarchive-debugsource-3.3.2-lp151.5.3.1 libarchive-devel-3.3.2-lp151.5.3.1 libarchive13-3.3.2-lp151.5.3.1 libarchive13-debuginfo-3.3.2-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libarchive13-32bit-3.3.2-lp151.5.3.1 libarchive13-32bit-debuginfo-3.3.2-lp151.5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000877.html https://www.suse.com/security/cve/CVE-2018-1000878.html https://www.suse.com/security/cve/CVE-2019-1000019.html https://www.suse.com/security/cve/CVE-2019-1000020.html https://www.suse.com/security/cve/CVE-2019-18408.html https://bugzilla.suse.com/1120653 https://bugzilla.suse.com/1120654 https://bugzilla.suse.com/1124341 https://bugzilla.suse.com/1124342 https://bugzilla.suse.com/1155079

1 0