February 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:0158-1: moderate: Recommended update for Certbot Python modules
by maintenance＠opensuse.org 12 Feb '19

12 Feb '19

openSUSE Recommended Update: Recommended update for Certbot Python modules ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0158-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for various CertBot modules fixes the following issues: python-acme was updated to 0.30.2: * Remove josepy helpers that are no longer needed * WIP External Account Binding (#6059) * Implement POST-as-GET requests (#6522) * ignore erroneously no-member lint error * Revert acme/acme/client.py * Bump version to 0.29.0 * remove unused six imports * Remove module-level ignore::ResourceWarnings * bring requests back down to 2.4.1 in setup and oldest constraints * Requests no longer vendorizes urllib3 * Use a newer version of requests because of the upcoming Callable import Deprecation in Python 3.8 that warns in Python 3.7 * Cover is run on 2.7, so mark 3-only lines as no cover * Ignore ResourceWarnings in various modules in a 2-compatible way. * ignore ResourceWarnings in acme tests * s/assertEquals/assertEqual * Use the ACMEv2 newNonce endpoint when a new nonce is needed, and newNonce is available in the directory. * Warn when using deprecated acme.challenges.TLSSNI01 * acme client now raises an error when you try to create an ACME account with a key that has already been used * you can now call query_registration without having to first call new_account python-certbot was updated to 0.30.2: * Update the version of setuptools pinned in certbot-auto to 40.6.3 to solve installation problems on newer OSes. * Always download the pinned version of pip in pipstrap to address breakages * Rename old,default.conf to old-and-default.conf to address commas in filenames breaking recent versions of pip. * Add VIRTUALENV_NO_DOWNLOAD=1 to all calls to virtualenv to address breakages from venv downloading the latest pip * Added the `update_account` subcommand for account management commands. * The default work and log directories have been changed back to /var/lib/letsencrypt and /var/log/letsencrypt respectively. * Noninteractive renewals with `certbot renew` (those not started from a terminal) now randomly sleep 1-480 seconds before beginning work in order to spread out load spikes on the server side. * Added External Account Binding support in cli and acme library. Command line arguments --eab-kid and --eab-hmac-key added. * Private key permissioning changes: Renewal preserves existing group mode & gid of previous private key material. Private keys for new lineages (i.e. new certs, not renewed) default to 0o600. * Update code and dependencies to clean up Resource and Deprecation Warnings. * Only depend on imgconverter extension for Sphinx >= 1.6 * revoke accepts --cert-name, and doesn't accept both --cert-name and --cert-path * Do not conflict with Certbot as now we provide/obsolete it * Provide and obsolete certbot main package too to ensure we can migrate to the new split setup directly * Conflict with certbot package to allow easy migration * the documentation can be built using Sphinx 1.6+ python-certbot-apache was updated to 0.30.2: * Various small fixes * Stop preferring TLS-SNI. * The grammar used by Augeas parser in Apache plugin was updated to fix various parsing errors. * parameter name in OpenSUSE overrides for default parameters * several other fixes python-certbot-dns-cloudflare was updated to 0.30.2. python-certbot-dns-cloudxns was updated to 0.30.2: * Lockstep with main certbot package * The CloudXNS plugin is now compatible with Lexicon 3.0+. * Add runtime requirements. python-certbot-dns-digitalocean was updated to 0.30.2: * lockstep with main certbot pkg python-certbot-dns-dnsimple was updated to 0.30.2: * lockstep with main certbot package * The DNSimple plugin is now compatible with Lexicon 3.0+. python-certbot-dns-dnsmadeeasy was updated to 0.30.2: * The DNS Made Easy plugin is now compatible with Lexicon 3.0+. python-certbot-dns-google was updated to 0.30.2: * Minor logging fixes python-certbot-dns-luadns was updated to 0.30.2: * The LuaDNS plugin is now compatible with Lexicon 3.0+. python-certbot-dns-nsone was updated to 0.30.2: * The NS1 plugin is now compatible with Lexicon 3.0+. python-certbot-dns-rfc2136 was updated to 0.30.2. python-certbot-dns-route53 was updated to 0.30.2: * Test fix for Route53 plugin to prevent boto3 making outgoing connections. python-cloudflare: * Add the package cloudflare needed by python-certbot subpackage python-digitalocean: * Added python-digitalocean version 1.13.2 needed by python-certbot-dns-digitalocean python-certbot-nginx was updated to version 0.30.2: * Stop preferring TLS-SNI. * Match Nginx parser update in allowing variable names to start with ${. * Fix ranking of vhosts in Nginx so that all port-matching vhosts come first. python-jsonlines was added as version 1.2.0. python-jsonpickle was added as version 0.9.6. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-158=1 Package List: - openSUSE Leap 15.0 (noarch): python2-acme-0.30.2-lp150.2.3.1 python2-certbot-0.30.2-lp150.2.1 python2-certbot-apache-0.30.2-lp150.2.1 python2-certbot-dns-cloudflare-0.30.2-lp150.2.1 python2-certbot-dns-cloudxns-0.30.2-lp150.2.1 python2-certbot-dns-digitalocean-0.30.2-lp150.2.1 python2-certbot-dns-dnsimple-0.30.2-lp150.2.1 python2-certbot-dns-dnsmadeeasy-0.30.2-lp150.2.1 python2-certbot-dns-google-0.30.2-lp150.2.1 python2-certbot-dns-luadns-0.30.2-lp150.2.1 python2-certbot-dns-nsone-0.30.2-lp150.2.1 python2-certbot-dns-rfc2136-0.30.2-lp150.2.1 python2-certbot-dns-route53-0.30.2-lp150.2.1 python2-certbot-nginx-0.30.2-lp150.2.1 python2-cloudflare-2.1.0-lp150.2.1 python2-digitalocean-1.13.2-lp150.2.1 python2-jsonlines-1.2.0-lp150.2.1 python2-jsonpickle-0.9.6-lp150.2.1 python3-acme-0.30.2-lp150.2.3.1 python3-certbot-0.30.2-lp150.2.1 python3-certbot-apache-0.30.2-lp150.2.1 python3-certbot-dns-cloudflare-0.30.2-lp150.2.1 python3-certbot-dns-cloudxns-0.30.2-lp150.2.1 python3-certbot-dns-digitalocean-0.30.2-lp150.2.1 python3-certbot-dns-dnsimple-0.30.2-lp150.2.1 python3-certbot-dns-dnsmadeeasy-0.30.2-lp150.2.1 python3-certbot-dns-google-0.30.2-lp150.2.1 python3-certbot-dns-luadns-0.30.2-lp150.2.1 python3-certbot-dns-nsone-0.30.2-lp150.2.1 python3-certbot-dns-rfc2136-0.30.2-lp150.2.1 python3-certbot-dns-route53-0.30.2-lp150.2.1 python3-certbot-nginx-0.30.2-lp150.2.1 python3-cloudflare-2.1.0-lp150.2.1 python3-digitalocean-1.13.2-lp150.2.1 python3-jsonlines-1.2.0-lp150.2.1 python3-jsonpickle-0.9.6-lp150.2.1 References:

1 0

openSUSE-RU-2019:0160-1: moderate: Recommended update for ibus, gnome-shell, gjs
by maintenance＠opensuse.org 12 Feb '19

12 Feb '19

openSUSE Recommended Update: Recommended update for ibus, gnome-shell, gjs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0160-1 Rating: moderate References: #1093541 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ibus, gnome-shell and gjs provides the following fix: - Fix some problems that were causing memory leaks in gnome-shell. (bsc#1093541) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-160=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gjs-1.45.4-4.3.1 gjs-debuginfo-1.45.4-4.3.1 gjs-debugsource-1.45.4-4.3.1 ibus-1.5.13-5.6.1 ibus-debuginfo-1.5.13-5.6.1 ibus-debugsource-1.5.13-5.6.1 ibus-devel-1.5.13-5.6.1 ibus-gtk-1.5.13-5.6.1 ibus-gtk-debuginfo-1.5.13-5.6.1 ibus-gtk3-1.5.13-5.6.1 ibus-gtk3-debuginfo-1.5.13-5.6.1 libgjs-devel-1.45.4-4.3.1 libgjs0-1.45.4-4.3.1 libgjs0-debuginfo-1.45.4-4.3.1 libibus-1_0-5-1.5.13-5.6.1 libibus-1_0-5-debuginfo-1.5.13-5.6.1 python-ibus-1.5.13-5.6.1 typelib-1_0-GjsPrivate-1_0-1.45.4-4.3.1 typelib-1_0-IBus-1_0-1.5.13-5.6.1 - openSUSE Leap 42.3 (noarch): gnome-shell-lang-3.20.4-19.1 ibus-branding-openSUSE-KDE-1.5.13-5.6.1 ibus-lang-1.5.13-5.6.1 - openSUSE Leap 42.3 (x86_64): gnome-shell-3.20.4-19.1 gnome-shell-browser-plugin-3.20.4-19.1 gnome-shell-browser-plugin-debuginfo-3.20.4-19.1 gnome-shell-calendar-3.20.4-19.1 gnome-shell-calendar-debuginfo-3.20.4-19.1 gnome-shell-debuginfo-3.20.4-19.1 gnome-shell-debugsource-3.20.4-19.1 gnome-shell-devel-3.20.4-19.1 ibus-gtk-32bit-1.5.13-5.6.1 ibus-gtk-debuginfo-32bit-1.5.13-5.6.1 ibus-gtk3-32bit-1.5.13-5.6.1 ibus-gtk3-debuginfo-32bit-1.5.13-5.6.1 libibus-1_0-5-32bit-1.5.13-5.6.1 libibus-1_0-5-debuginfo-32bit-1.5.13-5.6.1 References: https://bugzilla.suse.com/1093541

1 0

openSUSE-SU-2019:0159-1: moderate: Security update for python-urllib3
by opensuse-security＠opensuse.org 12 Feb '19

12 Feb '19

openSUSE Security Update: Security update for python-urllib3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0159-1 Rating: moderate References: #1024540 #1074247 #1110422 Cross-References: CVE-2016-9015 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for python-urllib3 fixes the following issues: python-urllib3 was updated to version 1.22 (fate#326733, bsc#1110422) and contains new features and lots of bugfixes: The full changelog can be found on: https://github.com/Lukasa/urllib3/blob/1.22/CHANGES.rst Security issues fixed: - CVE-2016-9015: TLS certificate validation vulnerability (bsc#1024540). (This issue did not affect our previous version 1.16.) Non security issues fixed: - bsc#1074247: Fix test suite, use correct date (gh#shazow/urllib3#1303). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-159=1 Package List: - openSUSE Leap 42.3 (noarch): python-urllib3-1.22-4.4.1 python3-urllib3-1.22-4.4.1 References: https://www.suse.com/security/cve/CVE-2016-9015.html https://bugzilla.suse.com/1024540 https://bugzilla.suse.com/1074247 https://bugzilla.suse.com/1110422

1 0

openSUSE-SU-2019:0161-1: important: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 12 Feb '19

12 Feb '19

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0161-1 Rating: important References: #1120431 #1122293 #1122299 Cross-References: CVE-2018-11212 CVE-2019-2422 CVE-2019-2426 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for java-11-openjdk to version 11.0.2+7 fixes the following issues: Security issues fixed: - CVE-2019-2422: Better FileChannel transfer performance (bsc#1122293) - CVE-2019-2426: Improve web server connections - CVE-2018-11212: Improve JPEG processing (bsc#1122299) - Better route routing - Better interface enumeration - Better interface lists - Improve BigDecimal support - Improve robot support - Better icon support - Choose printer defaults - Proper allocation handling - Initial class initialization - More reliable p11 transactions - Improve NIO stability - Better loading of classloader classes - Strengthen Windows Access Bridge Support - Improved data set handling - Improved LSA authentication - Libsunmscapi improved interactions Non-security issues fix: - Do not resolve by default the added JavaEE modules (bsc#1120431) - ~2.5% regression on compression benchmark starting with 12-b11 - java.net.http.HttpClient hangs on 204 reply without Content-length 0 - Add additional TeliaSonera root certificate - Add more ld preloading related info to hs_error file on Linux - Add test to exercise server-side client hello processing - AES encrypt performance regression in jdk11b11 - AIX: ProcessBuilder: Piping between created processes does not work. - AIX: Some class library files are missing the Classpath exception - AppCDS crashes for some uses with JRuby - Automate vtable/itable stub size calculation - BarrierSetC1::generate_referent_check() confuses register allocator - Better HTTP Redirection - Catastrophic size_t underflow in BitMap::*_large methods - Clip.isRunning() may return true after Clip.stop() was called - Compiler thread creation should be bounded by available space in memory and Code Cache - com.sun.net.httpserver.HttpServer returns Content-length header for 204 response code - Default mask register for avx512 instructions - Delayed starting of debugging via jcmd - Disable all DES cipher suites - Disable anon and NULL cipher suites - Disable unsupported GCs for Zero - Epsilon alignment adjustments can overflow max TLAB size - Epsilon elastic TLAB sizing may cause misalignment - HotSpot update for vm_version.cpp to recognise updated VS2017 - HttpClient does not retrieve files with large sizes over HTTP/1.1 - IIOException "tEXt chunk length is not proper" on opening png file - Improve TLS connection stability again - InitialDirContext ctor sometimes throws NPE if the server has sent a disconnection - Inspect stack during error reporting - Instead of circle rendered in appl window, but ellipse is produced JEditor Pane - Introduce diagnostic flag to abort VM on failed JIT compilation - Invalid assert(HeapBaseMinAddress > 0) in ReservedHeapSpace::initialize_compressed_heap - jar has issues with UNC-path arguments for the jar -C parameter [windows] - java.net.http HTTP client should allow specifying Origin and Referer headers - java.nio.file.Files.writeString writes garbled UTF-16 instead of UTF-8 - JDK 11.0.1 l10n resource file update - JDWP Transport Listener: dt_socket thread crash - JVMTI ResourceExhausted should not be posted in CompilerThread - LDAPS communication failure with jdk 1.8.0_181 - linux: Poor StrictMath performance due to non-optimized compilation - Missing synchronization when reading counters for live threads and peak thread count - NPE in SupportedGroupsExtension - OpenDataException thrown when constructing CompositeData for StackTraceElement - Parent class loader may not have a referred ClassLoaderData instance when obtained in Klass::class_in_module_of_loader - Populate handlers while holding streamHandlerLock - ppc64: Enable POWER9 CPU detection - print_location is not reliable enough (printing register info) - Reconsider default option for ClassPathURLCheck change done in JDK-8195874 - Register to register spill may use AVX 512 move instruction on unsupported platform. - s390: Use of shift operators not covered by cpp standard - serviceability/sa/TestUniverse.java#id0 intermittently fails with assert(get_instanceKlass()->is_loaded()) failed: must be at least loaded - SIGBUS in CodeHeapState::print_names() - SIGSEGV in MethodArityHistogram() with -XX:+CountCompiledCalls - Soft reference reclamation race in com.sun.xml.internal.stream.util.ThreadLocalBufferAllocator - Swing apps are slow if displaying from a remote source to many local displays - switch jtreg to 4.2b13 - Test library OSInfo.getSolarisVersion cannot determine Solaris version - TestOptionsWithRanges.java is very slow - TestOptionsWithRanges.java of '-XX:TLABSize=2147483648' fails intermittently - The Japanese message of FileNotFoundException garbled - The "supported_groups" extension in ServerHellos - ThreadInfoCompositeData.toCompositeData fails to map ThreadInfo to CompositeData - TimeZone.getDisplayName given Locale.US doesn't always honor the Locale. - TLS 1.2 Support algorithm in SunPKCS11 provider - TLS 1.3 handshake server name indication is missing on a session resume - TLS 1.3 server fails if ClientHello doesn't have pre_shared_key and psk_key_exchange_modes - TLS 1.3 interop problems with OpenSSL 1.1.1 when used on the client side with mutual auth - tz: Upgrade time-zone data to tzdata2018g - Undefined behaviour in ADLC - Update avx512 implementation - URLStreamHandler initialization race - UseCompressedOops requirement check fails fails on 32-bit system - windows: Update OS detection code to recognize Windows Server 2019 - x86: assert on unbound assembler Labels used as branch targets - x86: jck tests for ldc2_w bytecode fail - x86: sharedRuntimeTrig/sharedRuntimeTrans compiled without optimization - "-XX:OnOutOfMemoryError" uses fork instead of vfork This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-161=1 Package List: - openSUSE Leap 15.0 (x86_64): java-11-openjdk-11.0.2.0-lp150.2.12.1 java-11-openjdk-accessibility-11.0.2.0-lp150.2.12.1 java-11-openjdk-accessibility-debuginfo-11.0.2.0-lp150.2.12.1 java-11-openjdk-debuginfo-11.0.2.0-lp150.2.12.1 java-11-openjdk-debugsource-11.0.2.0-lp150.2.12.1 java-11-openjdk-demo-11.0.2.0-lp150.2.12.1 java-11-openjdk-devel-11.0.2.0-lp150.2.12.1 java-11-openjdk-headless-11.0.2.0-lp150.2.12.1 java-11-openjdk-jmods-11.0.2.0-lp150.2.12.1 java-11-openjdk-src-11.0.2.0-lp150.2.12.1 - openSUSE Leap 15.0 (noarch): java-11-openjdk-javadoc-11.0.2.0-lp150.2.12.1 References: https://www.suse.com/security/cve/CVE-2018-11212.html https://www.suse.com/security/cve/CVE-2019-2422.html https://www.suse.com/security/cve/CVE-2019-2426.html https://bugzilla.suse.com/1120431 https://bugzilla.suse.com/1122293 https://bugzilla.suse.com/1122299

1 0

openSUSE-RU-2019:0157-1: moderate: Recommended update for libtermkey, neovim, and python-neovim
by maintenance＠opensuse.org 12 Feb '19

12 Feb '19

openSUSE Recommended Update: Recommended update for libtermkey, neovim, and python-neovim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0157-1 Rating: moderate References: #1094627 #1098800 #1100496 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update provides fixes and improvements for several packages: Package: libtermkey - Version bump to 0.20: * Adds parsing of DCS and OSC control strings * Fixed handling of Ctrl-Space, bugfix for keypad mode switching, endian fix for unicode keys (thanks jamessan) Package: neovim - Puts the system-wide config now in /etc (boo#1098800) - Several other minor changes (see rpm .changes file for more details) - Version bump to 0.3.1 introduced several features, bug fixes, and other changes Package: python-neovim - Version bump to 0.3.1 introduced several smaller changes to work with neovim (see rpm .changes file for more details) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-157=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libtermkey-debugsource-0.20-bp150.3.3.1 libtermkey-devel-0.20-bp150.3.3.1 libtermkey1-0.20-bp150.3.3.1 libtermkey1-debuginfo-0.20-bp150.3.3.1 lua51-bit32-5.3.0-bp150.2.1 lua51-bit32-debuginfo-5.3.0-bp150.2.1 lua51-bit32-debugsource-5.3.0-bp150.2.1 - openSUSE Backports SLE-15 (x86_64): neovim-0.3.1-bp150.2.3.1 neovim-debuginfo-0.3.1-bp150.2.3.1 neovim-debugsource-0.3.1-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): neovim-lang-0.3.1-bp150.2.3.1 python2-neovim-0.3.1-bp150.3.3.1 python3-neovim-0.3.1-bp150.3.3.1 References: https://bugzilla.suse.com/1094627 https://bugzilla.suse.com/1098800 https://bugzilla.suse.com/1100496

1 0

openSUSE-SU-2019:0155-1: important: Security update for python3
by opensuse-security＠opensuse.org 08 Feb '19

08 Feb '19

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0155-1 Rating: important References: #1120644 #1122191 Cross-References: CVE-2018-20406 CVE-2019-5010 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-5010: Fixed a denial-of-service vulnerability in the X509 certificate parser (bsc#1122191) - CVE-2018-20406: Fixed a integer overflow via a large LONG_BINPUT (bsc#1120644) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-155=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpython3_6m1_0-3.6.5-lp150.2.6.1 libpython3_6m1_0-debuginfo-3.6.5-lp150.2.6.1 python3-3.6.5-lp150.2.6.1 python3-base-3.6.5-lp150.2.6.1 python3-base-debuginfo-3.6.5-lp150.2.6.1 python3-base-debugsource-3.6.5-lp150.2.6.1 python3-curses-3.6.5-lp150.2.6.1 python3-curses-debuginfo-3.6.5-lp150.2.6.1 python3-dbm-3.6.5-lp150.2.6.1 python3-dbm-debuginfo-3.6.5-lp150.2.6.1 python3-debuginfo-3.6.5-lp150.2.6.1 python3-debugsource-3.6.5-lp150.2.6.1 python3-devel-3.6.5-lp150.2.6.1 python3-devel-debuginfo-3.6.5-lp150.2.6.1 python3-idle-3.6.5-lp150.2.6.1 python3-testsuite-3.6.5-lp150.2.6.1 python3-testsuite-debuginfo-3.6.5-lp150.2.6.1 python3-tk-3.6.5-lp150.2.6.1 python3-tk-debuginfo-3.6.5-lp150.2.6.1 python3-tools-3.6.5-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libpython3_6m1_0-32bit-3.6.5-lp150.2.6.1 libpython3_6m1_0-32bit-debuginfo-3.6.5-lp150.2.6.1 python3-32bit-3.6.5-lp150.2.6.1 python3-32bit-debuginfo-3.6.5-lp150.2.6.1 python3-base-32bit-3.6.5-lp150.2.6.1 python3-base-32bit-debuginfo-3.6.5-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): python3-doc-3.6.5-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2018-20406.html https://www.suse.com/security/cve/CVE-2019-5010.html https://bugzilla.suse.com/1120644 https://bugzilla.suse.com/1122191

1 0

openSUSE-RU-2019:0156-1: moderate: Recommended update for kmod
by maintenance＠opensuse.org 08 Feb '19

08 Feb '19

openSUSE Recommended Update: Recommended update for kmod ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0156-1 Rating: moderate References: #1118629 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kmod fixes the following issues: - Fix module dependency file corruption on parallel invocation (bsc#1118629). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-156=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kmod-17-16.1 kmod-compat-17-16.1 kmod-debuginfo-17-16.1 kmod-debugsource-17-16.1 libkmod-devel-17-16.1 libkmod2-17-16.1 libkmod2-debuginfo-17-16.1 References: https://bugzilla.suse.com/1118629

1 0

openSUSE-SU-2019:0154-1: important: Security update for rsyslog
by opensuse-security＠opensuse.org 08 Feb '19

08 Feb '19

openSUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0154-1 Rating: important References: #1123164 Cross-References: CVE-2018-16881 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following issues: Security issue fixed: - CVE-2018-16881: Fixed a denial of service when both the imtcp module and Octet-Counted TCP Framing is enabled (bsc#1123164). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-154=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rsyslog-8.24.0-2.10.1 rsyslog-debuginfo-8.24.0-2.10.1 rsyslog-debugsource-8.24.0-2.10.1 rsyslog-diag-tools-8.24.0-2.10.1 rsyslog-diag-tools-debuginfo-8.24.0-2.10.1 rsyslog-doc-8.24.0-2.10.1 rsyslog-module-dbi-8.24.0-2.10.1 rsyslog-module-dbi-debuginfo-8.24.0-2.10.1 rsyslog-module-elasticsearch-8.24.0-2.10.1 rsyslog-module-elasticsearch-debuginfo-8.24.0-2.10.1 rsyslog-module-gcrypt-8.24.0-2.10.1 rsyslog-module-gcrypt-debuginfo-8.24.0-2.10.1 rsyslog-module-gssapi-8.24.0-2.10.1 rsyslog-module-gssapi-debuginfo-8.24.0-2.10.1 rsyslog-module-gtls-8.24.0-2.10.1 rsyslog-module-gtls-debuginfo-8.24.0-2.10.1 rsyslog-module-guardtime-8.24.0-2.10.1 rsyslog-module-guardtime-debuginfo-8.24.0-2.10.1 rsyslog-module-mmnormalize-8.24.0-2.10.1 rsyslog-module-mmnormalize-debuginfo-8.24.0-2.10.1 rsyslog-module-mysql-8.24.0-2.10.1 rsyslog-module-mysql-debuginfo-8.24.0-2.10.1 rsyslog-module-omamqp1-8.24.0-2.10.1 rsyslog-module-omamqp1-debuginfo-8.24.0-2.10.1 rsyslog-module-omhttpfs-8.24.0-2.10.1 rsyslog-module-omhttpfs-debuginfo-8.24.0-2.10.1 rsyslog-module-omtcl-8.24.0-2.10.1 rsyslog-module-omtcl-debuginfo-8.24.0-2.10.1 rsyslog-module-pgsql-8.24.0-2.10.1 rsyslog-module-pgsql-debuginfo-8.24.0-2.10.1 rsyslog-module-relp-8.24.0-2.10.1 rsyslog-module-relp-debuginfo-8.24.0-2.10.1 rsyslog-module-snmp-8.24.0-2.10.1 rsyslog-module-snmp-debuginfo-8.24.0-2.10.1 rsyslog-module-udpspoof-8.24.0-2.10.1 rsyslog-module-udpspoof-debuginfo-8.24.0-2.10.1 References: https://www.suse.com/security/cve/CVE-2018-16881.html https://bugzilla.suse.com/1123164

1 0

openSUSE-RU-2019:0150-1: important: Recommended update for openssh
by maintenance＠opensuse.org 08 Feb '19

08 Feb '19

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0150-1 Rating: important References: #1123028 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssh fixes the following issues: - A previously applied security patch unintendedly changed the behavior of OpenSSH's "scp" utility such that server-side brace expansion would no longer be supported. Attempts to copy a set files from a remote machine to the local one by running "scp 'remote:{file-a,file-b}' /tmp" would fail. This change in behavior broke Corosync and, potentially, many user scripts that relied on brace expansion. [bsc#1123028] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-150=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): openssh-7.2p2-32.1 openssh-askpass-gnome-7.2p2-32.1 openssh-askpass-gnome-debuginfo-7.2p2-32.1 openssh-cavs-7.2p2-32.1 openssh-cavs-debuginfo-7.2p2-32.1 openssh-debuginfo-7.2p2-32.1 openssh-debugsource-7.2p2-32.1 openssh-fips-7.2p2-32.1 openssh-helpers-7.2p2-32.1 openssh-helpers-debuginfo-7.2p2-32.1 References: https://bugzilla.suse.com/1123028

1 0

openSUSE-SU-2019:0153-1: moderate: Security update for subversion
by opensuse-security＠opensuse.org 08 Feb '19

08 Feb '19

openSUSE Security Update: Security update for subversion ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0153-1 Rating: moderate References: #1122842 Cross-References: CVE-2018-11803 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for subversion fixes the following issues: Security issue fixed: - CVE-2018-11803: Fixed a vulnerability that allowed malicious SVN clients to trigger a crash in mod_dav_svn by omitting the root path from a recursive directory listing request (bsc#1122842) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-153=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsvn_auth_gnome_keyring-1-0-1.10.0-lp150.2.3.1 libsvn_auth_gnome_keyring-1-0-debuginfo-1.10.0-lp150.2.3.1 libsvn_auth_kwallet-1-0-1.10.0-lp150.2.3.1 libsvn_auth_kwallet-1-0-debuginfo-1.10.0-lp150.2.3.1 subversion-1.10.0-lp150.2.3.1 subversion-debuginfo-1.10.0-lp150.2.3.1 subversion-debugsource-1.10.0-lp150.2.3.1 subversion-devel-1.10.0-lp150.2.3.1 subversion-perl-1.10.0-lp150.2.3.1 subversion-perl-debuginfo-1.10.0-lp150.2.3.1 subversion-python-1.10.0-lp150.2.3.1 subversion-python-ctypes-1.10.0-lp150.2.3.1 subversion-python-debuginfo-1.10.0-lp150.2.3.1 subversion-ruby-1.10.0-lp150.2.3.1 subversion-ruby-debuginfo-1.10.0-lp150.2.3.1 subversion-server-1.10.0-lp150.2.3.1 subversion-server-debuginfo-1.10.0-lp150.2.3.1 subversion-tools-1.10.0-lp150.2.3.1 subversion-tools-debuginfo-1.10.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): subversion-bash-completion-1.10.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-11803.html https://bugzilla.suse.com/1122842

1 0