March 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1054-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 26 Mar '19

26 Mar '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1054-1 Rating: moderate References: #1085515 #1090538 #1094208 #1107270 #1114840 #1121272 #1121808 #974108 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for pacemaker provides the following fixes: - cts: Do not require nodes to be specified if only listing tests. (bsc#1114840) - cts: Temporarily disable any enabled cluster services when running remote tests. - cts: Count service as enabled only if it is explicitly enabled. - cts: Ignore monitor failures when testing remote node fencing. - cts: Lower remote connection failure detection time. - cts: Clear constraints on cluster nodes. (bsc#1121272) - cts: Resume any possibly frozen pacemaker_remoted when cleaning up the test. (bsc#1121272) - cts: Simulate failure of pacemaker_remoted by freezing it with SIGSTOP. (bsc#1121272) - cts-exec: Run the tests for the other resource classes even without python systemd bindings. (bsc#1121808) - fenced: Handle fencing requested with nodeid by using the membership cache of known nodes. (bsc#1094208, bsc#1107270, bsc#974108) - controld: Make it possible to manually confirm unseen nodes are down. (bsc#1094208, bsc#1107270) - pengine: "symmetrical" defaults to "false" for serialize orders. (bsc#1085515) - pengine: Avoid potential use of NULL in unpack_simple_rsc_order(). (bsc#1085515) - pengine: Fix swapped warning message arguments leading to segfault. (bsc#1090538) - Pacemaker Explained: "symmetrical" defaults to "false" for serialize orders. (bsc#1085515) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1054=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpacemaker-devel-1.1.16-4.6.1 libpacemaker3-1.1.16-4.6.1 libpacemaker3-debuginfo-1.1.16-4.6.1 pacemaker-1.1.16-4.6.1 pacemaker-cli-1.1.16-4.6.1 pacemaker-cli-debuginfo-1.1.16-4.6.1 pacemaker-cts-1.1.16-4.6.1 pacemaker-cts-debuginfo-1.1.16-4.6.1 pacemaker-debuginfo-1.1.16-4.6.1 pacemaker-debugsource-1.1.16-4.6.1 pacemaker-remote-1.1.16-4.6.1 pacemaker-remote-debuginfo-1.1.16-4.6.1 References: https://bugzilla.suse.com/1085515 https://bugzilla.suse.com/1090538 https://bugzilla.suse.com/1094208 https://bugzilla.suse.com/1107270 https://bugzilla.suse.com/1114840 https://bugzilla.suse.com/1121272 https://bugzilla.suse.com/1121808 https://bugzilla.suse.com/974108

1 0

openSUSE-RU-2019:1053-1: moderate: Recommended update for discord
by maintenance＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Recommended Update: Recommended update for discord ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1053-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for discord fixes the following issues: Discord was updated to version 0.0.9. * No upstream release notes. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-1053=1 Package List: - openSUSE Leap 15.0:NonFree (x86_64): discord-0.0.9-lp150.2.6.1 discord-debuginfo-0.0.9-lp150.2.6.1 References:

1 0

openSUSE-SU-2019:1049-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1049-1 Rating: moderate References: #1102359 #1102364 Cross-References: CVE-2018-14522 CVE-2018-14523 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1049=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): aubio-debugsource-0.4.1-bp150.3.6.1 aubio-tools-0.4.1-bp150.3.6.1 aubio-tools-debuginfo-0.4.1-bp150.3.6.1 libaubio-devel-0.4.1-bp150.3.6.1 libaubio4-0.4.1-bp150.3.6.1 libaubio4-debuginfo-0.4.1-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libaubio4-64bit-0.4.1-bp150.3.6.1 libaubio4-64bit-debuginfo-0.4.1-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-14522.html https://www.suse.com/security/cve/CVE-2018-14523.html https://bugzilla.suse.com/1102359 https://bugzilla.suse.com/1102364

1 0

openSUSE-SU-2019:1050-1: moderate: Security update for blueman
by opensuse-security＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Security Update: Security update for blueman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1050-1 Rating: moderate References: #1083066 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication (boo#1083066). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1050=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): blueman-2.0.6-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): blueman-lang-2.0.6-bp150.2.3.1 thunar-sendto-blueman-2.0.6-bp150.2.3.1 References: https://bugzilla.suse.com/1083066

1 0

openSUSE-SU-2019:1050-1: moderate: Security update for blueman
by opensuse-security＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Security Update: Security update for blueman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1050-1 Rating: moderate References: #1083066 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication (boo#1083066). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1050=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): blueman-2.0.6-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): blueman-lang-2.0.6-bp150.2.3.1 thunar-sendto-blueman-2.0.6-bp150.2.3.1 References: https://bugzilla.suse.com/1083066

1 0

openSUSE-RU-2019:1053-1: moderate: Recommended update for discord
by maintenance＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Recommended Update: Recommended update for discord ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1053-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for discord fixes the following issues: Discord was updated to version 0.0.9. * No upstream release notes. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-1053=1 Package List: - openSUSE Leap 15.0:NonFree (x86_64): discord-0.0.9-lp150.2.6.1 discord-debuginfo-0.0.9-lp150.2.6.1 References:

1 0

openSUSE-SU-2019:1049-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1049-1 Rating: moderate References: #1102359 #1102364 Cross-References: CVE-2018-14522 CVE-2018-14523 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1049=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): aubio-debugsource-0.4.1-bp150.3.6.1 aubio-tools-0.4.1-bp150.3.6.1 aubio-tools-debuginfo-0.4.1-bp150.3.6.1 libaubio-devel-0.4.1-bp150.3.6.1 libaubio4-0.4.1-bp150.3.6.1 libaubio4-debuginfo-0.4.1-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libaubio4-64bit-0.4.1-bp150.3.6.1 libaubio4-64bit-debuginfo-0.4.1-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2018-14522.html https://www.suse.com/security/cve/CVE-2018-14523.html https://bugzilla.suse.com/1102359 https://bugzilla.suse.com/1102364

1 0

openSUSE-SU-2019:1051-1: moderate: Security update for kauth
by opensuse-security＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Security Update: Security update for kauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1051-1 Rating: moderate References: #1124863 Cross-References: CVE-2019-7443 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kauth fixes the following issues: Security issue fixed: - CVE-2019-7443: Fixed an insecure handling of arguments in helpers by removing the support of passing gui variants (bsc#1124863). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1051=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): kauth-debugsource-5.32.0-bp150.3.10.1 kauth-devel-5.32.0-bp150.3.10.1 kcoreaddons-5.32.0-bp150.3.3.1 kcoreaddons-debugsource-5.32.0-bp150.3.3.1 kcoreaddons-devel-5.32.0-bp150.3.3.1 kcoreaddons-devel-debuginfo-5.32.0-bp150.3.3.1 libKF5Auth5-5.32.0-bp150.3.10.1 libKF5Auth5-debuginfo-5.32.0-bp150.3.10.1 libKF5CoreAddons5-5.32.0-bp150.3.3.1 libKF5CoreAddons5-debuginfo-5.32.0-bp150.3.3.1 libpolkit-qt5-1-1-0.112.0-bp150.3.3.1 libpolkit-qt5-1-devel-0.112.0-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kauth-devel-64bit-5.32.0-bp150.3.10.1 kcoreaddons-devel-64bit-5.32.0-bp150.3.3.1 kcoreaddons-devel-64bit-debuginfo-5.32.0-bp150.3.3.1 libKF5Auth5-64bit-5.32.0-bp150.3.10.1 libKF5Auth5-64bit-debuginfo-5.32.0-bp150.3.10.1 libKF5CoreAddons5-64bit-5.32.0-bp150.3.3.1 libKF5CoreAddons5-64bit-debuginfo-5.32.0-bp150.3.3.1 libpolkit-qt5-1-1-64bit-0.112.0-bp150.3.3.1 libpolkit-qt5-1-devel-64bit-0.112.0-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): kcoreaddons-lang-5.32.0-bp150.3.3.1 libKF5Auth5-lang-5.32.0-bp150.3.10.1 References: https://www.suse.com/security/cve/CVE-2019-7443.html https://bugzilla.suse.com/1124863

1 0

openSUSE-RU-2019:1048-1: moderate: Recommended update for owncloud-client
by maintenance＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Recommended Update: Recommended update for owncloud-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1048-1 Rating: moderate References: #1057832 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for owncloud-client fixes the following issues: - Update to upstream version 2.4.2 (boo#1057832) * Coming with some bugfixes, Changelog: https://owncloud.org/changelog/desktop-client/ * Fix a problem with older Qt versions (https://github.com/owncloud/client/issues/5968) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1048=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libowncloudsync-devel-2.4.2-bp150.2.3.1 libowncloudsync0-2.4.2-bp150.2.3.1 owncloud-client-2.4.2-bp150.2.3.1 owncloud-client-caja-2.4.2-bp150.2.3.1 owncloud-client-doc-2.4.2-bp150.2.3.1 owncloud-client-dolphin-2.4.2-bp150.2.3.1 owncloud-client-l10n-2.4.2-bp150.2.3.1 owncloud-client-nautilus-2.4.2-bp150.2.3.1 owncloud-client-nemo-2.4.2-bp150.2.3.1 References: https://bugzilla.suse.com/1057832

1 0

openSUSE-RU-2019:1052-1: Recommended update for perl-Finance-Quote
by maintenance＠opensuse.org 25 Mar '19

25 Mar '19

openSUSE Recommended Update: Recommended update for perl-Finance-Quote ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1052-1 Rating: low References: #1077300 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for perl-Finance-Quote fixes the following issues: - GnuCash was unable to retrieve price information if the Perl CGI module was not installed (boo#1077300). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1052=1 Package List: - openSUSE Backports SLE-15 (noarch): perl-Finance-Quote-1.47-bp150.3.3.1 References: https://bugzilla.suse.com/1077300

1 0