March 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:0294-1: important: Security update for hiawatha
by opensuse-security＠opensuse.org 05 Mar '19

05 Mar '19

openSUSE Security Update: Security update for hiawatha ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0294-1 Rating: important References: #1125751 Cross-References: CVE-2019-8358 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for hiawatha to version 10.8.4 fixes the following issue: Security issue fixed: - CVE-2019-8358: Fixed a vulnerability which allowed a remote atacker to perform directory traversal when AllowDotFiles was enabled (bsc#1125751). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-294=1 Package List: - openSUSE Leap 15.0 (x86_64): hiawatha-10.8.4-lp150.2.4.1 hiawatha-debuginfo-10.8.4-lp150.2.4.1 hiawatha-debugsource-10.8.4-lp150.2.4.1 hiawatha-letsencrypt-10.8.4-lp150.2.4.1 References: https://www.suse.com/security/cve/CVE-2019-8358.html https://bugzilla.suse.com/1125751

1 0

openSUSE-SU-2019:0291-1: important: Security update for procps
by opensuse-security＠opensuse.org 04 Mar '19

04 Mar '19

openSUSE Security Update: Security update for procps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0291-1 Rating: important References: #1092100 #1121753 Cross-References: CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for procps fixes the following security issues: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). (These issues were previously released for SUSE Linux Enterprise 12 SP3 and SP4.) Also the following non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-291=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libprocps3-3.3.9-23.1 libprocps3-debuginfo-3.3.9-23.1 procps-3.3.9-23.1 procps-debuginfo-3.3.9-23.1 procps-debugsource-3.3.9-23.1 procps-devel-3.3.9-23.1 References: https://www.suse.com/security/cve/CVE-2018-1122.html https://www.suse.com/security/cve/CVE-2018-1123.html https://www.suse.com/security/cve/CVE-2018-1124.html https://www.suse.com/security/cve/CVE-2018-1125.html https://www.suse.com/security/cve/CVE-2018-1126.html https://bugzilla.suse.com/1092100 https://bugzilla.suse.com/1121753

1 0

openSUSE-RU-2019:0290-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 03 Mar '19

03 Mar '19

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0290-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for vlc fixes the following issues: - fix building with the latest libx264 with 10bit color depth support - fix a memory leak on error - fix the encoder to really drain the remaining frames This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-290=1 Package List: - openSUSE Backports SLE-15 (noarch): vlc-lang-3.0.2-bp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): libvlc5-3.0.2-bp150.2.3.1 libvlccore9-3.0.2-bp150.2.3.1 vlc-3.0.2-bp150.2.3.1 vlc-codec-gstreamer-3.0.2-bp150.2.3.1 vlc-devel-3.0.2-bp150.2.3.1 vlc-jack-3.0.2-bp150.2.3.1 vlc-noX-3.0.2-bp150.2.3.1 vlc-qt-3.0.2-bp150.2.3.1 References:

1 0

openSUSE-RU-2019:0289-1: moderate: Recommended update for python-Sphinx
by maintenance＠opensuse.org 03 Mar '19

03 Mar '19

openSUSE Recommended Update: Recommended update for python-Sphinx ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0289-1 Rating: moderate References: #1124495 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-Sphinx fixes the following issues: - also build latex subpackages on openSUSE Leap (bsc#1124495) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-289=1 Package List: - openSUSE Leap 42.3 (noarch): python-Sphinx-1.6.5-3.10.1 python-Sphinx-doc-1.6.5-3.10.1 python-Sphinx-doc-html-1.6.5-3.10.1 python-Sphinx-doc-man-1.6.5-3.10.1 python-Sphinx-doc-man-common-1.6.5-3.10.1 python-Sphinx-latex-1.6.5-3.10.1 python-sphinxcontrib-1.0.1-4.1 python-sphinxcontrib-websupport-1.0.1-4.1 python3-Sphinx-1.6.5-3.10.1 python3-Sphinx-doc-1.6.5-3.10.1 python3-Sphinx-doc-man-1.6.5-3.10.1 python3-Sphinx-latex-1.6.5-3.10.1 python3-sphinxcontrib-1.0.1-4.1 python3-sphinxcontrib-websupport-1.0.1-4.1 References: https://bugzilla.suse.com/1124495

1 0

openSUSE-RU-2019:0282-1: moderate: Recommended update for singularity
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for singularity ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0282-1 Rating: moderate References: #1125369 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for singularity fixes the following issues: - On openSUSE Leap 42 or SUSE Linux Enterprise 12 / PackageHub12 do not check the permissions version (boo#1125369). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-282=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libsingularity1-2.6.1-17.1 singularity-2.6.1-17.1 singularity-devel-2.6.1-17.1 References: https://bugzilla.suse.com/1125369

1 0

openSUSE-RU-2019:0286-1: moderate: Recommended update for yast2-smt
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for yast2-smt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0286-1 Rating: moderate References: #1106550 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-smt provides the following fix: - Make sure the module correctly starts and stops SMT again via the corresponding services. The associated checkbox was renamed to "Run ..." to better reflect the behavior. (bsc#1106550) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-286=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-smt-3.0.17-2.10.1 References: https://bugzilla.suse.com/1106550

1 0

openSUSE-RU-2019:0280-1: moderate: Recommended update for libstorage-ng
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for libstorage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0280-1 Rating: moderate References: #1101870 #1120070 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libstorage-ng fixes the following issues: - Fix partitioning error by relaxing the check for luks correctness. (bsc#1120070, bsc#1101870) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-280=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libstorage-ng-debuginfo-3.3.317-lp150.2.15.1 libstorage-ng-debugsource-3.3.317-lp150.2.15.1 libstorage-ng-devel-3.3.317-lp150.2.15.1 libstorage-ng-integration-tests-3.3.317-lp150.2.15.1 libstorage-ng-python3-3.3.317-lp150.2.15.1 libstorage-ng-python3-debuginfo-3.3.317-lp150.2.15.1 libstorage-ng-ruby-3.3.317-lp150.2.15.1 libstorage-ng-ruby-debuginfo-3.3.317-lp150.2.15.1 libstorage-ng-utils-3.3.317-lp150.2.15.1 libstorage-ng-utils-debuginfo-3.3.317-lp150.2.15.1 libstorage-ng1-3.3.317-lp150.2.15.1 libstorage-ng1-debuginfo-3.3.317-lp150.2.15.1 - openSUSE Leap 15.0 (noarch): libstorage-ng-lang-3.3.317-lp150.2.15.1 References: https://bugzilla.suse.com/1101870 https://bugzilla.suse.com/1120070

1 0

openSUSE-RU-2019:0285-1: moderate: Recommended update for yast2-instserver
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for yast2-instserver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0285-1 Rating: moderate References: #1122003 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-instserver provides the following fix: - Fix parsing DISTRO from 'content' file. (bsc#1122003) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-285=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-instserver-3.1.7-4.7.1 References: https://bugzilla.suse.com/1122003

1 0

openSUSE-RU-2019:0283-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0283-1 Rating: moderate References: #1120745 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tomcat provides the following fix: - Fix tomcat-tool-wrapper classpath error. (bsc#1120745) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-283=1 Package List: - openSUSE Leap 15.0 (noarch): tomcat-9.0.12-lp150.2.12.1 tomcat-admin-webapps-9.0.12-lp150.2.12.1 tomcat-docs-webapp-9.0.12-lp150.2.12.1 tomcat-el-3_0-api-9.0.12-lp150.2.12.1 tomcat-embed-9.0.12-lp150.2.12.1 tomcat-javadoc-9.0.12-lp150.2.12.1 tomcat-jsp-2_3-api-9.0.12-lp150.2.12.1 tomcat-jsvc-9.0.12-lp150.2.12.1 tomcat-lib-9.0.12-lp150.2.12.1 tomcat-servlet-4_0-api-9.0.12-lp150.2.12.1 tomcat-webapps-9.0.12-lp150.2.12.1 References: https://bugzilla.suse.com/1120745

1 0

openSUSE-RU-2019:0284-1: moderate: Recommended update for xkeyboard-config
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for xkeyboard-config ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0284-1 Rating: moderate References: #1123784 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xkeyboard-config fixes the following issues: - Fixes missing mappings for evdev keys KEY_RFKILL and KEY_WWAN. (bsc#1123784) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-284=1 Package List: - openSUSE Leap 15.0 (noarch): xkeyboard-config-2.23.1-lp150.2.3.1 xkeyboard-config-lang-2.23.1-lp150.2.3.1 References: https://bugzilla.suse.com/1123784

1 0

openSUSE-RU-2019:0281-1: moderate: Recommended update for yast2-storage-ng
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for yast2-storage-ng ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0281-1 Rating: moderate References: #1099485 #1121442 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-storage-ng fixes the following issues: - Allows to cancel Guided Setup. (bsc#1121442) - Adds link to storage client from installation summary. (bsc#1099485) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-281=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-storage-ng-4.0.217-lp150.2.24.1 References: https://bugzilla.suse.com/1099485 https://bugzilla.suse.com/1121442

1 0

openSUSE-RU-2019:0279-1: important: Recommended update for drbd
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for drbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0279-1 Rating: important References: #1118732 #1118974 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for drbd to version 9.0.15-1 and drbd-utils fixes the following issues: - split brain handles malfunction when 2 primaries (bsc#1118732) - remove the deprecated comment about drbd-overview (bsc#1118974) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-279=1 Package List: - openSUSE Leap 15.0 (x86_64): drbd-9.0.15+git.c46d2790-lp150.2.5.1 drbd-debugsource-9.0.15+git.c46d2790-lp150.2.5.1 drbd-kmp-default-9.0.15+git.c46d2790_k4.12.14_lp150.12.48-lp150.2.5.1 drbd-kmp-default-debuginfo-9.0.15+git.c46d2790_k4.12.14_lp150.12.48-lp150.2.5.1 drbd-utils-9.3.1-lp150.2.3.1 drbd-utils-debuginfo-9.3.1-lp150.2.3.1 drbd-utils-debugsource-9.3.1-lp150.2.3.1 References: https://bugzilla.suse.com/1118732 https://bugzilla.suse.com/1118974

1 0

openSUSE-RU-2019:0288-1: moderate: Recommended update for lapack
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for lapack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0288-1 Rating: moderate References: #1033770 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lapack fixes the following issues: - Remove test matrix generators (boo#1033770) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-288=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): blas-devel-3.5.0-12.3.1 blas-devel-static-3.5.0-12.3.1 lapack-debugsource-3.5.0-12.3.1 lapack-devel-3.5.0-12.3.1 lapack-devel-static-3.5.0-12.3.1 lapacke-devel-3.5.0-12.3.1 lapacke-devel-static-3.5.0-12.3.1 libblas3-3.5.0-12.3.1 libblas3-debuginfo-3.5.0-12.3.1 liblapack3-3.5.0-12.3.1 liblapack3-debuginfo-3.5.0-12.3.1 liblapacke3-3.5.0-12.3.1 liblapacke3-debuginfo-3.5.0-12.3.1 - openSUSE Leap 42.3 (noarch): blas-man-3.5.0-12.3.1 lapack-man-3.5.0-12.3.1 - openSUSE Leap 42.3 (x86_64): blas-devel-32bit-3.5.0-12.3.1 lapack-devel-32bit-3.5.0-12.3.1 lapacke-devel-32bit-3.5.0-12.3.1 libblas3-32bit-3.5.0-12.3.1 libblas3-debuginfo-32bit-3.5.0-12.3.1 liblapack3-32bit-3.5.0-12.3.1 liblapack3-debuginfo-32bit-3.5.0-12.3.1 liblapacke3-32bit-3.5.0-12.3.1 liblapacke3-debuginfo-32bit-3.5.0-12.3.1 References: https://bugzilla.suse.com/1033770

1 0

openSUSE-RU-2019:0287-1: moderate: Recommended update for vlc
by maintenance＠opensuse.org 02 Mar '19

02 Mar '19

openSUSE Recommended Update: Recommended update for vlc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0287-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for vlc fixes the following issues: - fix building with the latest libx264 with 10bit color depth support - fix a memory leak on error - fix the encoder to really drain the remaining frames Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-287=1 Package List: - openSUSE Leap 15.0 (noarch): vlc-lang-3.0.2-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libvlc5-3.0.2-lp150.3.3.1 libvlc5-debuginfo-3.0.2-lp150.3.3.1 libvlccore9-3.0.2-lp150.3.3.1 libvlccore9-debuginfo-3.0.2-lp150.3.3.1 vlc-3.0.2-lp150.3.3.1 vlc-codec-gstreamer-3.0.2-lp150.3.3.1 vlc-codec-gstreamer-debuginfo-3.0.2-lp150.3.3.1 vlc-debuginfo-3.0.2-lp150.3.3.1 vlc-debugsource-3.0.2-lp150.3.3.1 vlc-devel-3.0.2-lp150.3.3.1 vlc-jack-3.0.2-lp150.3.3.1 vlc-jack-debuginfo-3.0.2-lp150.3.3.1 vlc-noX-3.0.2-lp150.3.3.1 vlc-noX-debuginfo-3.0.2-lp150.3.3.1 vlc-qt-3.0.2-lp150.3.3.1 vlc-qt-debuginfo-3.0.2-lp150.3.3.1 References:

1 0

openSUSE-RU-2019:0278-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0278-1 Rating: moderate References: Affected Products: openSUSE Leap 42.3:NonFree openSUSE Leap 15.0:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for opera fixes the following issues: Update to version 58.0.3135.68 * DNA-75461 Extend Yandex Zen coverage by Belarus and Kazakhstan Update to version 58.0.3135.65 * DNA-73673 Crash at extensions::Extension:location() * DNA-73865 Incorrect temp dir used * DNA-74035 standalone update uses incorrect temp dir * DNA-74689 Text highlight becomes gray after selection * DNA-74862 Search copy popup visible after opening new ext tab * DNA-75024 Proxy auth dialog blocks onAuthRequired event Update to version 58.0.3135.47 * DNA-74542 Record the feature value for DNA-74540 * DNA-74960 Promote O58 to Stable Update to version 57.0.3098.116 * DNA-71854 Linux crash with older versions of NSS * DNA-73213 Bookmark bar drop indicator is visible * DNA-74571 Start page is opened after restart with some pages * DNA-74744 In-house translations of "Display the start page" Update to version 57.0.3098.110 * DNA-74142 RSS does not load * DNA-74478 Add some info about first run logic to crash logs Update to version 57.0.3098.106 * DNA-70670 Internal error pages miss error code info * DNA-73057 Crash fixes * DNA-74364 Zen news notification doesn't disappear * DNA-74531 Use Discover servers by default * DNA-74542 Record the feature value for DNA-74540 * DNA-74503 [SECURITY] Magellan vuln fix Update to version 57.0.3098.102 (changes since 57.0.3098.76): * Crash on exit when add to bookmarks popup opened and window closed. * Start page elements state (enabled/disabled). * Crash at extensions::`anonymous namespace”::ExternalWindowHelper::FindAndCloseWindow. * Omnibox closes after middle-click on a suggestion. * Crash when cancelling dragging tab. * custom_partner_content.json is not created. * Switching news off and back on does not render content. * Prepare Campaign isyf for regular releases. * Crash at opera::content_filter::`anonymous namespace”::CaretMatches. * Improve Netflix tile hover animation. * Control Netflix notifications visibility by a pref. * Handle invalid sources format for scrollable section. * Allow to override the News version served from CDN. * Crash at BrowserProcessImpl::Unpin(). * Crash at base::Value::Value(base::flat_map const&). * [O57] web3.js downloaded with flag disabled. * Fix performance problems with extensions blocking feature. * Disable official PiP (picture-in-picture) or implement a UI for it. Update to version 57.0.3098.76 * DNA-73673 Crash at extensions::Extension::location() * DNA-73823 Deliver translations for notifications * DNA-73835 Installer doesn't start * DNA-73852 Get rid of unescaped '#' in body * DNA-73875 Don't change the option after upgrade * DNA-73931 [Netflix] 'Watch trailer' should be separate line * DNA-74013 Improve layout of user consent popup * DNA-74014 Show Netflix notification ASAP * DNA-74018 Set integer, not boolean pref in session startup pref * DNA-74024 Crash loop on startup with a clean profile * DNA-74042 Error message in Console after disable/enable News * DNA-74063 Promote O57 to stable stream Update to version 56.0.3051.104 (changes since 56.0.3051.99): * DNA-69051 [Mac] Crash at opera:hints::HintManager::RemoveObserver * DNA-73192 Promotion Banner Update Update to version 56.0.3051.99 (changes since 56.0.3051.31): * DNA-72644 extension desktop capture does not work properly * DNA-73176 cannot see full license text on opera://about/credits * DNA-73285 [Linux] no tab separator * DNA-73335 Crash at -[ZoomButton setAddressBarModel:] * DNA-73492 Coupon toolbar Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3:NonFree: zypper in -t patch openSUSE-2019-278=1 - openSUSE Leap 15.0:NonFree: zypper in -t patch openSUSE-2019-278=1 Package List: - openSUSE Leap 42.3:NonFree (x86_64): opera-58.0.3135.68-77.1 - openSUSE Leap 15.0:NonFree (x86_64): opera-58.0.3135.68-lp150.2.12.1 References:

1 0

openSUSE-SU-2019:0276-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0276-1 Rating: moderate References: #1123354 Cross-References: CVE-2019-6977 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5 fixes the following issues: Security vulnerability fixed: - CVE-2019-6977: Fixed a heap buffer overflow in gdImageColorMatch in gd_color_match.c (bsc#1123354) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-276=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-112.1 apache2-mod_php5-debuginfo-5.5.14-112.1 php5-5.5.14-112.1 php5-bcmath-5.5.14-112.1 php5-bcmath-debuginfo-5.5.14-112.1 php5-bz2-5.5.14-112.1 php5-bz2-debuginfo-5.5.14-112.1 php5-calendar-5.5.14-112.1 php5-calendar-debuginfo-5.5.14-112.1 php5-ctype-5.5.14-112.1 php5-ctype-debuginfo-5.5.14-112.1 php5-curl-5.5.14-112.1 php5-curl-debuginfo-5.5.14-112.1 php5-dba-5.5.14-112.1 php5-dba-debuginfo-5.5.14-112.1 php5-debuginfo-5.5.14-112.1 php5-debugsource-5.5.14-112.1 php5-devel-5.5.14-112.1 php5-dom-5.5.14-112.1 php5-dom-debuginfo-5.5.14-112.1 php5-enchant-5.5.14-112.1 php5-enchant-debuginfo-5.5.14-112.1 php5-exif-5.5.14-112.1 php5-exif-debuginfo-5.5.14-112.1 php5-fastcgi-5.5.14-112.1 php5-fastcgi-debuginfo-5.5.14-112.1 php5-fileinfo-5.5.14-112.1 php5-fileinfo-debuginfo-5.5.14-112.1 php5-firebird-5.5.14-112.1 php5-firebird-debuginfo-5.5.14-112.1 php5-fpm-5.5.14-112.1 php5-fpm-debuginfo-5.5.14-112.1 php5-ftp-5.5.14-112.1 php5-ftp-debuginfo-5.5.14-112.1 php5-gd-5.5.14-112.1 php5-gd-debuginfo-5.5.14-112.1 php5-gettext-5.5.14-112.1 php5-gettext-debuginfo-5.5.14-112.1 php5-gmp-5.5.14-112.1 php5-gmp-debuginfo-5.5.14-112.1 php5-iconv-5.5.14-112.1 php5-iconv-debuginfo-5.5.14-112.1 php5-imap-5.5.14-112.1 php5-imap-debuginfo-5.5.14-112.1 php5-intl-5.5.14-112.1 php5-intl-debuginfo-5.5.14-112.1 php5-json-5.5.14-112.1 php5-json-debuginfo-5.5.14-112.1 php5-ldap-5.5.14-112.1 php5-ldap-debuginfo-5.5.14-112.1 php5-mbstring-5.5.14-112.1 php5-mbstring-debuginfo-5.5.14-112.1 php5-mcrypt-5.5.14-112.1 php5-mcrypt-debuginfo-5.5.14-112.1 php5-mssql-5.5.14-112.1 php5-mssql-debuginfo-5.5.14-112.1 php5-mysql-5.5.14-112.1 php5-mysql-debuginfo-5.5.14-112.1 php5-odbc-5.5.14-112.1 php5-odbc-debuginfo-5.5.14-112.1 php5-opcache-5.5.14-112.1 php5-opcache-debuginfo-5.5.14-112.1 php5-openssl-5.5.14-112.1 php5-openssl-debuginfo-5.5.14-112.1 php5-pcntl-5.5.14-112.1 php5-pcntl-debuginfo-5.5.14-112.1 php5-pdo-5.5.14-112.1 php5-pdo-debuginfo-5.5.14-112.1 php5-pgsql-5.5.14-112.1 php5-pgsql-debuginfo-5.5.14-112.1 php5-phar-5.5.14-112.1 php5-phar-debuginfo-5.5.14-112.1 php5-posix-5.5.14-112.1 php5-posix-debuginfo-5.5.14-112.1 php5-pspell-5.5.14-112.1 php5-pspell-debuginfo-5.5.14-112.1 php5-readline-5.5.14-112.1 php5-readline-debuginfo-5.5.14-112.1 php5-shmop-5.5.14-112.1 php5-shmop-debuginfo-5.5.14-112.1 php5-snmp-5.5.14-112.1 php5-snmp-debuginfo-5.5.14-112.1 php5-soap-5.5.14-112.1 php5-soap-debuginfo-5.5.14-112.1 php5-sockets-5.5.14-112.1 php5-sockets-debuginfo-5.5.14-112.1 php5-sqlite-5.5.14-112.1 php5-sqlite-debuginfo-5.5.14-112.1 php5-suhosin-5.5.14-112.1 php5-suhosin-debuginfo-5.5.14-112.1 php5-sysvmsg-5.5.14-112.1 php5-sysvmsg-debuginfo-5.5.14-112.1 php5-sysvsem-5.5.14-112.1 php5-sysvsem-debuginfo-5.5.14-112.1 php5-sysvshm-5.5.14-112.1 php5-sysvshm-debuginfo-5.5.14-112.1 php5-tidy-5.5.14-112.1 php5-tidy-debuginfo-5.5.14-112.1 php5-tokenizer-5.5.14-112.1 php5-tokenizer-debuginfo-5.5.14-112.1 php5-wddx-5.5.14-112.1 php5-wddx-debuginfo-5.5.14-112.1 php5-xmlreader-5.5.14-112.1 php5-xmlreader-debuginfo-5.5.14-112.1 php5-xmlrpc-5.5.14-112.1 php5-xmlrpc-debuginfo-5.5.14-112.1 php5-xmlwriter-5.5.14-112.1 php5-xmlwriter-debuginfo-5.5.14-112.1 php5-xsl-5.5.14-112.1 php5-xsl-debuginfo-5.5.14-112.1 php5-zip-5.5.14-112.1 php5-zip-debuginfo-5.5.14-112.1 php5-zlib-5.5.14-112.1 php5-zlib-debuginfo-5.5.14-112.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-112.1 References: https://www.suse.com/security/cve/CVE-2019-6977.html https://bugzilla.suse.com/1123354

1 0

openSUSE-SU-2019:0275-1: important: Security update for kernel-firmware
by opensuse-security＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Security Update: Security update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0275-1 Rating: important References: #1104301 Cross-References: CVE-2018-5383 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kernel-firmware fixes the following issues: Security issue fixed: - CVE-2018-5383: Fixed an implementation issue in Bluetooth where the eliptic curve parameters were not sufficiently validated during Diffie-Hellman key exchange (bsc#1104301). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-275=1 Package List: - openSUSE Leap 42.3 (noarch): kernel-firmware-20170530-26.1 ucode-amd-20170530-26.1 References: https://www.suse.com/security/cve/CVE-2018-5383.html https://bugzilla.suse.com/1104301

1 0

openSUSE-RU-2019:0269-1: moderate: Recommended update for salt
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0269-1 Rating: moderate References: #1099887 #1114029 #1114474 #1116837 #1117995 #1121091 #1123044 #1123512 #1123865 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for salt fixes the following issues: This update fixes the following issues: salt: - Remove patch unable install salt minions on SLE 15 (bsc#1123512). - Fix integration tests in state compiler (U#2068). - Fix "pkg.list_pkgs" output when using "attr" to take the arch into account (bsc#1114029). - Fix powerpc null server_id_arch (bsc#1117995). - Fix module 'azure.storage' has no attribute '__version__'(bsc#1121091). - Add supportconfig module and states for minions and SaltSSH - Fix FIPS enabled RES clients (bsc#1099887). - Add hold/unhold functions. Fix Debian repo "signed-by". - Strip architecture from debian package names. - Fix latin1 encoding problems on file module (bsc#1116837). - Don't error on retcode 0 in libcrypto.OPENSSL_init_crypto. - Handle anycast IPv6 addresses on network.routes (bsc#1114474). - Debian info_installed compatibility (U#50453). - Add compatibility with other package modules for "list_repos" function. - Remove MSI Azure cloud module authentication patch (bsc#1123044). - Don't encode response string from role API. - Don't call zypper with more than one --no-refresh parameter (bsc#1123865). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-269=1 Package List: - openSUSE Leap 42.3 (noarch): salt-bash-completion-2018.3.0-26.1 salt-fish-completion-2018.3.0-26.1 salt-zsh-completion-2018.3.0-26.1 - openSUSE Leap 42.3 (x86_64): python2-salt-2018.3.0-26.1 python3-salt-2018.3.0-26.1 salt-2018.3.0-26.1 salt-api-2018.3.0-26.1 salt-cloud-2018.3.0-26.1 salt-doc-2018.3.0-26.1 salt-master-2018.3.0-26.1 salt-minion-2018.3.0-26.1 salt-proxy-2018.3.0-26.1 salt-ssh-2018.3.0-26.1 salt-syndic-2018.3.0-26.1 References: https://bugzilla.suse.com/1099887 https://bugzilla.suse.com/1114029 https://bugzilla.suse.com/1114474 https://bugzilla.suse.com/1116837 https://bugzilla.suse.com/1117995 https://bugzilla.suse.com/1121091 https://bugzilla.suse.com/1123044 https://bugzilla.suse.com/1123512 https://bugzilla.suse.com/1123865

1 0

openSUSE-RU-2019:0271-1: moderate: Recommended update for dmidecode
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for dmidecode ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0271-1 Rating: moderate References: #1120149 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dmidecode fixes the following issues: - Extensions to Memory Device (Type 17) (FATE#326831 bsc#1120149) - Add "Logical non-volatile device" to the memory device types (FATE#326831 bsc#1120149) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-271=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dmidecode-3.0-5.3.1 dmidecode-debuginfo-3.0-5.3.1 dmidecode-debugsource-3.0-5.3.1 References: https://bugzilla.suse.com/1120149

1 0

openSUSE-RU-2019:0273-1: Recommended update for tuned
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for tuned ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0273-1 Rating: low References: #1098395 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tuned fixes the following issues: - Fix logrotation to be configurable (bsc#1098395) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-273=1 Package List: - openSUSE Leap 15.0 (noarch): tuned-2.8.0-lp150.4.3.1 tuned-gtk-2.8.0-lp150.4.3.1 tuned-profiles-atomic-2.8.0-lp150.4.3.1 tuned-profiles-nfv-2.8.0-lp150.4.3.1 tuned-profiles-oracle-2.8.0-lp150.4.3.1 tuned-profiles-realtime-2.8.0-lp150.4.3.1 tuned-utils-2.8.0-lp150.4.3.1 tuned-utils-systemtap-2.8.0-lp150.4.3.1 References: https://bugzilla.suse.com/1098395

1 0

openSUSE-RU-2019:0270-1: moderate: Recommended update for libsemanage
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for libsemanage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0270-1 Rating: moderate References: #1115500 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libsemanage provides the following fix: - Prevent an error message when reading module version if the directory does not exist. (bsc#1115500) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-270=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsemanage-debugsource-2.5-6.3.1 libsemanage-devel-2.5-6.3.1 libsemanage-devel-static-2.5-6.3.1 libsemanage1-2.5-6.3.1 libsemanage1-debuginfo-2.5-6.3.1 python-semanage-2.5-6.3.1 python-semanage-debuginfo-2.5-6.3.1 python-semanage-debugsource-2.5-6.3.1 - openSUSE Leap 42.3 (x86_64): libsemanage1-32bit-2.5-6.3.1 libsemanage1-debuginfo-32bit-2.5-6.3.1 References: https://bugzilla.suse.com/1115500

1 0

openSUSE-SU-2019:0274-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:0274-1 Rating: important References: #1012382 #1020413 #1031492 #1042286 #1050549 #1078355 #1086095 #1086652 #1099810 #1103097 #1105428 #1106061 #1106929 #1116345 #1117108 #1117645 #1117744 #1120017 #1120758 #1120902 #1123933 #1124166 #1124732 #1124735 #1124775 #1124777 #1124780 #1124811 #1125000 #1125014 #1125446 #1125794 #1125796 #1125808 #1125809 #1125810 #1125892 #802154 Cross-References: CVE-2018-5391 CVE-2019-3459 CVE-2019-3460 CVE-2019-7221 CVE-2019-7222 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 33 fixes is now available. Description: The openSUSE Leap 42.3 kernel was updated to 4.4.175 to receive various bugfixes. The following security bugs were fixed: - CVE-2018-5391: Fixed a vulnerability, which allowed an attacker to cause a denial of service attack with low rates of packets targeting IP fragment re-assembly. (bsc#1103097) - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124732). - CVE-2019-7222: Fixed an information leakage in the KVM hypervisor related to handling page fault exceptions, which allowed a guest user/process to use this flaw to leak the host's stack memory contents to a guest (bsc#1124735). The following non-security bugs were fixed: - ASoC: Intel: mrfld: fix uninitialized variable access (bnc#1012382). - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages (bnc#1012382). - ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M (bnc#1012382). - Documentation/network: reword kernel version reference (bnc#1012382). - IB/core: type promotion bug in rdma_rw_init_one_mr() (). - IB/rxe: Fix incorrect cache cleanup in error flow (). - IB/rxe: replace kvfree with vfree (). - NFC: nxp-nci: Include unaligned.h instead of access_ok.h (bnc#1012382). - RDMA/bnxt_re: Fix a couple off by one bugs (bsc#1020413, ). - RDMA/bnxt_re: Synchronize destroy_qp with poll_cq (bsc#1125446). - Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" (bnc#1012382). - Revert "cifs: In Kconfig CONFIG_CIFS_POSIX needs depends on legacy (insecure cifs)" (bnc#1012382). - Revert "exec: load_script: do not blindly truncate shebang string" (bnc#1012382). - Revert "loop: Fix double mutex_unlock(&loop_ctl_mutex) in loop_control_ioctl()" (bnc#1012382). - Revert "loop: Fold __loop_release into loop_release" (bnc#1012382). - Revert "loop: Get rid of loop_index_mutex" (bnc#1012382). - Revert "mmc: bcm2835: Fix DMA channel leak on probe error (bsc#1120902)." - Revert most of 4.4.174 (kabi). - acpi, nfit: Fix ARS overflow continuation (bsc#1125000). - acpi/nfit: fix cmd_rc for acpi_nfit_ctl to always return a value (bsc#1124775). - alpha: Fix Eiger NR_IRQS to 128 (bnc#1012382). - alpha: fix page fault handling for r16-r18 targets (bnc#1012382). - alsa: compress: Fix stop handling on compressed capture streams (bnc#1012382). - alsa: hda - Add quirk for HP EliteBook 840 G5 (bnc#1012382). - alsa: hda - Serialize codec registrations (bnc#1012382). - alsa: usb-audio: Fix implicit fb endpoint setup by quirk (bnc#1012382). - arc: perf: map generic branches to correct hardware condition (bnc#1012382). - arm64: KVM: Skip MMIO insn after emulation (bnc#1012382). - arm64: ftrace: do not adjust the LR value (bnc#1012382). - arm64: hyp-stub: Forbid kprobing of the hyp-stub (bnc#1012382). - arm: 8808/1: kexec:offline panic_smp_self_stop CPU (bnc#1012382). - arm: OMAP2+: hwmod: Fix some section annotations (bnc#1012382). - arm: cns3xxx: Fix writing to wrong PCI config registers after alignment (bnc#1012382). - arm: dts: Fix OMAP4430 SDP Ethernet startup (bnc#1012382). - arm: dts: da850-evm: Correct the sound card name (bnc#1012382). - arm: dts: kirkwood: Fix polarity of GPIO fan lines (bnc#1012382). - arm: dts: mmp2: fix TWSI2 (bnc#1012382). - arm: iop32x/n2100: fix PCI IRQ mapping (bnc#1012382). - arm: pxa: avoid section mismatch warning (bnc#1012382). - batman-adv: Avoid WARN on net_device without parent in netns (bnc#1012382). - batman-adv: Force mac header to start of data on xmit (bnc#1012382). - bluetooth: Fix unnecessary error message for HCI request completion (bnc#1012382). - bnxt_re: Fix couple of memory leaks that could lead to IOMMU call traces (bsc#1020413). - can: bcm: check timer values before ktime conversion (bnc#1012382). - can: dev: __can_get_echo_skb(): fix bogous check for non-existing skb by removing it (bnc#1012382). - ceph: clear inode pointer when snap realm gets dropped by its inode (bsc#1125809). - char/mwave: fix potential Spectre v1 vulnerability (bnc#1012382). - cifs: Always resolve hostname before reconnecting (bnc#1012382). - cifs: Do not count -ENODATA as failure for query directory (bnc#1012382). - cifs: Fix possible hang during async MTU reads and writes (bnc#1012382). - cifs: Limit memory used by lock request calls to a page (bnc#1012382). - cifs: check ntwrk_buf_start for NULL before dereferencing it (bnc#1012382). - clk: imx6sl: ensure MMDC CH0 handshake is bypassed (bnc#1012382). - cpufreq: intel_pstate: Fix HWP on boot CPU after system resume (bsc#1120017). - cpuidle: big.LITTLE: fix refcount leak (bnc#1012382). - crypto: ux500 - Use proper enum in cryp_set_dma_transfer (bnc#1012382). - crypto: ux500 - Use proper enum in hash_set_dma_transfer (bnc#1012382). - cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() (bnc#1012382). - dccp: fool proof ccid_hc_[rt]x_parse_options() (bnc#1012382). - debugfs: fix debugfs_rename parameter checking (bnc#1012382). - dlm: Do not swamp the CPU with callbacks queued during recovery (bnc#1012382). - dm thin: fix bug where bio that overwrites thin block ignores FUA (bnc#1012382). - dmaengine: imx-dma: fix wrong callback invoke (bnc#1012382). - drbd: Avoid Clang warning about pointless switch statment (bnc#1012382). - drbd: disconnect, if the wrong UUIDs are attached on a connected peer (bnc#1012382). - drbd: narrow rcu_read_lock in drbd_sync_handshake (bnc#1012382). - drbd: skip spurious timeout (ping-timeo) when failing promote (bnc#1012382). - drivers: core: Remove glue dirs from sysfs earlier (bnc#1012382). - drm/bufs: Fix Spectre v1 vulnerability (bnc#1012382). - drm/i915: Block fbdev HPD processing during suspend (bsc#1106929) - drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set (bsc#1106929) - drm/modes: Prevent division by zero htotal (bnc#1012382). - drm/vmwgfx: Fix setting of dma masks (bsc#1106929) - drm/vmwgfx: Return error code from vmw_execbuf_copy_fence_user (bsc#1106929) - enic: fix checksum validation for IPv6 (bnc#1012382). - exec: load_script: do not blindly truncate shebang string (bnc#1012382). - f2fs: fix wrong return value of f2fs_acl_create (bnc#1012382). - f2fs: move dir data flush to write checkpoint process (bnc#1012382). - f2fs: read page index before freeing (bnc#1012382). - fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb() (bnc#1012382). - fs/epoll: drop ovflist branch prediction (bnc#1012382). - fs: add the fsnotify call to vfs_iter_write (bnc#1012382). - fs: do not scan the inode cache before SB_BORN is set (bnc#1012382). - fs: fix lost error code in dio_complete (bsc#1117744). - fuse: call pipe_buf_release() under pipe lock (bnc#1012382). - fuse: decrement NR_WRITEBACK_TEMP on the right page (bnc#1012382). - fuse: handle zero sized retrieve correctly (bnc#1012382). - futex: Fix (possible) missed wakeup (bsc#1050549). - gdrom: fix a memory leak bug (bnc#1012382). - gfs2: Revert "Fix loop in gfs2_rbm_find" (bnc#1012382). - gpio: pl061: handle failed allocations (bnc#1012382). - gpu: ipu-v3: Fix CSI offsets for imx53 (bsc#1106929) - gpu: ipu-v3: Fix i.MX51 CSI control registers offset (bsc#1106929) - hid: debug: fix the ring buffer implementation (bnc#1012382). - hid: lenovo: Add checks to fix of_led_classdev_register (bnc#1012382). - hwmon: (lm80) Fix missing unlock on error in set_fan_div() (git-fixes). - hwmon: (lm80) fix a missing check of bus read in lm80 probe (bnc#1012382). - hwmon: (lm80) fix a missing check of the status of SMBus read (bnc#1012382). - i2c-axxia: check for error conditions first (bnc#1012382). - igb: Fix an issue that PME is not enabled during runtime suspend (bnc#1012382). - inet: frags: add a pointer to struct netns_frags (bnc#1012382). - inet: frags: better deal with smp races (bnc#1012382). - inet: frags: break the 2GB limit for frags storage (bnc#1012382). - inet: frags: change inet_frags_init_net() return value (bnc#1012382). - inet: frags: do not clone skb in ip_expire() (bnc#1012382). - inet: frags: fix ip6frag_low_thresh boundary (bnc#1012382). - inet: frags: get rid of ipfrag_skb_cb/FRAG_CB (bnc#1012382). - inet: frags: get rif of inet_frag_evicting() (bnc#1012382). - inet: frags: refactor ipfrag_init() (bnc#1012382). - inet: frags: refactor ipv6_frag_init() (bnc#1012382). - inet: frags: refactor lowpan_net_frag_init() (bnc#1012382). - inet: frags: remove inet_frag_maybe_warn_overflow() (bnc#1012382). - inet: frags: remove some helpers (bnc#1012382). - inet: frags: reorganize struct netns_frags (bnc#1012382). - inet: frags: use rhashtables for reassembly units (bnc#1012382). - input: bma150 - register input device after setting private data (bnc#1012382). - input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK (bnc#1012382). - input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 (bnc#1012382). - input: xpad - add support for SteelSeries Stratus Duo (bnc#1012382). - intel_pstate: Update frequencies of policy->cpus only from ->set_policy() (bsc#1120017). - iommu/arm-smmu-v3: Use explicit mb() when moving cons pointer (bnc#1012382). - ip: add helpers to process in-order fragments faster (bnc#1012382). - ip: frags: fix crash in ip_do_fragment() (bnc#1012382). - ip: process in-order fragments efficiently (bnc#1012382). - ip: use rb trees for IP frag queue (bnc#1012382). - ipfrag: really prevent allocation on netns exit (bnc#1012382). - ipv4: frags: precedence bug in ip_expire() (bnc#1012382). - ipv6: Consider sk_bound_dev_if when binding a socket to an address (bnc#1012382). - ipv6: frags: rewrite ip6_expire_frag_queue() (bnc#1012382). - irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (bnc#1012382). - isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() (bnc#1012382). - kABI: protect linux/kfifo.h include in hid-debug (kabi). - kABI: protect struct hda_bus (kabi). - kaweth: use skb_cow_head() to deal with cloned skbs (bnc#1012382). - kernel/exit.c: release ptraced tasks before zap_pid_ns_processes (bnc#1012382). - kernel/hung_task.c: break RCU locks based on jiffies (bnc#1012382). - kvm: VMX: Fix x2apic check in vmx_msr_bitmap_mode() (bsc#1124166). - kvm: VMX: Missing part of upstream commit 904e14fb7cb9 (bsc#1124166). - kvm: x86: Fix single-step debugging (bnc#1012382). - kvm: x86: svm: report MSR_IA32_MCG_EXT_CTL as unsupported (bnc#1012382). - l2tp: copy 4 more bytes to linear part if necessary (bnc#1012382). - l2tp: fix reading optional fields of L2TPv3 (bnc#1012382). - l2tp: remove l2specific_len dependency in l2tp_core (bnc#1012382). - libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() (bsc#1125810). - libnvdimm, pfn: Pad pfn namespaces relative to other regions (bsc#1124811). - libnvdimm: Use max contiguous area for namespace size (bsc#1124780). - libnvdimm: fix ars_status output length calculation (bsc#1124777). - locking/rwsem: Fix (possible) missed wakeup (bsc#1050549). - mac80211: ensure that mgmt tx skbs have tailroom for encryption (bnc#1012382). - mac80211: fix radiotap vendor presence bitmap handling (bnc#1012382). - media: DaVinci-VPBE: fix error handling in vpbe_initialize() (bnc#1012382). - memstick: Prevent memstick host from getting runtime suspended during card detection (bnc#1012382). - mips: OCTEON: do not set octeon_dma_bar_type if PCI is disabled (bnc#1012382). - mips: VDSO: Include $(ccflags-vdso) in o32,n32 .lds builds (bnc#1012382). - mips: bpf: fix encoding bug for mm_srlv32_op (bnc#1012382). - mips: cm: reprime error cause (bnc#1012382). - misc: vexpress: Off by one in vexpress_syscfg_exec() (bnc#1012382). - mm, oom: fix use-after-free in oom_kill_process (bnc#1012382). - mm, page_alloc: drop should_suppress_show_mem (bnc#1125892, bnc#1106061). - mm: migrate: do not rely on __PageMovable() of newpage after unlocking it (bnc#1012382). - mmc: bcm2835: Fix DMA channel leak on probe error (bsc#1120902). - mmc: sdhci-iproc: handle mmc_of_parse() errors during probe (bnc#1012382). - modpost: validate symbol names also in find_elf_symbol (bnc#1012382). - mtd: rawnand: gpmi: fix MX28 bus master lockup problem (bnc#1012382). - net/mlx4_core: Add masking for a few queries on HCA caps (bnc#1012382). - net/rose: fix NULL ax25_cb kernel panic (bnc#1012382). - net: Fix usage of pskb_trim_rcsum (bnc#1012382). - net: bridge: Fix ethernet header pointer before check skb forwardable (bnc#1012382). - net: dp83640: expire old TX-skb (bnc#1012382). - net: dsa: slave: Do not propagate flag changes on down slave interfaces (bnc#1012382). - net: fix pskb_trim_rcsum_slow() with odd trim offset (bnc#1012382). - net: ieee802154: 6lowpan: fix frag reassembly (bnc#1012382). - net: ipv4: Fix memory leak in network namespace dismantle (bnc#1012382). - net: ipv4: do not handle duplicate fragments as overlapping (bnc#1012382 bsc#1116345). - net: modify skb_rbtree_purge to return the truesize of all purged skbs (bnc#1012382). - net: pskb_trim_rcsum() and CHECKSUM_COMPLETE are friends (bnc#1012382). - net: systemport: Fix WoL with password after deep sleep (bnc#1012382). - net_sched: refetch skb protocol for each filter (bnc#1012382). - netrom: switch to sock timer API (bnc#1012382). - nfit: fix unchecked dereference in acpi_nfit_ctl (bsc#1125014). - nfs: nfs_compare_mount_options always compare auth flavors (bnc#1012382). - nfsd4: fix crash on writing v4_end_grace before nfsd startup (bnc#1012382). - niu: fix missing checks of niu_pci_eeprom_read (bnc#1012382). - ocfs2: do not clear bh uptodate for block read (bnc#1012382). - openvswitch: Avoid OOB read when parsing flow nlattrs (bnc#1012382). - perf tests evsel-tp-sched: Fix bitwise operator (bnc#1012382). - perf tools: Add Hygon Dhyana support (bnc#1012382). - perf unwind: Take pgoff into account when reporting elf to libdwfl (bnc#1012382). - perf unwind: Unwind with libdw does not take symfs into account (bnc#1012382). - perf/core: Do not WARN() for impossible ring-buffer sizes (bnc#1012382). - perf/core: Fix impossible ring-buffer sizes warning (bnc#1012382). - perf/x86/intel/uncore: Add Node ID mask (bnc#1012382). - pinctrl: msm: fix gpio-hog related boot issues (bnc#1012382). - platform/x86: asus-nb-wmi: Drop mapping of 0x33 and 0x34 scan codes (bnc#1012382). - platform/x86: asus-nb-wmi: Map 0x35 to KEY_SCREENLOCK (bnc#1012382). - platform/x86: thinkpad_acpi: Proper model/release matching (bsc#1099810). - powerpc/pseries: add of_node_put() in dlpar_detach_node() (bnc#1012382). - powerpc/uaccess: fix warning/error with access_ok() (bnc#1012382). - ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl (bnc#1012382). - rbd: do not return 0 on unmap if RBD_DEV_FLAG_REMOVING is set (bsc#1125808). - rcu: Force boolean subscript for expedited stall warnings (bnc#1012382). - rhashtable: Add rhashtable_lookup() (bnc#1012382). - rhashtable: add rhashtable_lookup_get_insert_key() (bnc#1012382 bsc#1042286). - rhashtable: add schedule points (bnc#1012382). - rhashtable: reorganize struct rhashtable layout (bnc#1012382). - s390/early: improve machine detection (bnc#1012382). - s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU (bnc#1012382). - s390/smp: fix CPU hotplug deadlock with CPU rescan (bnc#1012382). - sata_rcar: fix deferred probing (bnc#1012382). - sched/wake_q: Document wake_q_add() (bsc#1050549). - sched/wake_q: Fix wakeup ordering for wake_q (bsc#1050549). - sched/wake_q: Reduce reference counting for special users (bsc#1050549). - scripts/decode_stacktrace: only strip base path when a prefix of the path (bnc#1012382). - scripts/git_sort/git_sort.py: Add mkp/scsi 5.0/scsi-fixes - scsi: lpfc: Correct LCB RJT handling (bnc#1012382). - scsi: lpfc: Correct MDS diag and nvmet configuration (bsc#1125796). - scsi: mpt3sas: API 's to support NVMe drive addition to SML (bsc#1117108). - scsi: mpt3sas: API's to remove nvme drive from sml (bsc#1117108). - scsi: mpt3sas: Add PCI device ID for Andromeda (bsc#1117108). - scsi: mpt3sas: Add an I/O barrier (bsc#1117108). - scsi: mpt3sas: Add ioc_<level> logging macros (bsc#1117108). - scsi: mpt3sas: Add nvme device support in slave alloc, target alloc and probe (bsc#1117108). - scsi: mpt3sas: Add-Task-management-debug-info-for-NVMe-drives (bsc#1117108). - scsi: mpt3sas: Added support for SAS Device Discovery Error Event (bsc#1117108). - scsi: mpt3sas: Added support for nvme encapsulated request message (bsc#1117108). - scsi: mpt3sas: Adding support for SAS3616 HBA device (bsc#1117108). - scsi: mpt3sas: Allow processing of events during driver unload (bsc#1117108). - scsi: mpt3sas: Annotate switch/case fall-through (bsc#1117108). - scsi: mpt3sas: As per MPI-spec, use combined reply queue for SAS3.5 controllers when HBA supports more than 16 MSI-x vectors (bsc#1117108). - scsi: mpt3sas: Bug fix for big endian systems (bsc#1117108). - scsi: mpt3sas: Bump mpt3sas driver version to v16.100.00.00 (bsc#1117108). - scsi: mpt3sas: Cache enclosure pages during enclosure add (bsc#1117108). - scsi: mpt3sas: Configure reply post queue depth, DMA and sgl tablesize (bsc#1117108). - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT and reply_q_name to %s: (bsc#1117108). - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT without logging levels (bsc#1117108). - scsi: mpt3sas: Convert mlsleading uses of pr_<level> with MPT3SAS_FMT (bsc#1117108). - scsi: mpt3sas: Convert uses of pr_<level> with MPT3SAS_FMT to ioc_<level> (bsc#1117108). - scsi: mpt3sas: Display chassis slot information of the drive (bsc#1117108). - scsi: mpt3sas: Do not abort I/Os issued to NVMe drives while processing Async Broadcast primitive event (bsc#1117108). - scsi: mpt3sas: Do not access the structure after decrementing it's instance reference count (bsc#1117108). - scsi: mpt3sas: Do not use 32-bit atomic request descriptor for Ventura controllers (bsc#1117108). - scsi: mpt3sas: Enhanced handling of Sense Buffer (bsc#1117108). - scsi: mpt3sas: Fix a race condition in mpt3sas_base_hard_reset_handler() (bsc#1117108). - scsi: mpt3sas: Fix calltrace observed while running IO & reset (bsc#1117108). - scsi: mpt3sas: Fix indentation (bsc#1117108). - scsi: mpt3sas: Fix memory allocation failure test in 'mpt3sas_base_attach()' (bsc#1117108). - scsi: mpt3sas: Fix nvme drives checking for tlr (bsc#1117108). - scsi: mpt3sas: Fix possibility of using invalid Enclosure Handle for SAS device after host reset (bsc#1117108). - scsi: mpt3sas: Fix removal and addition of vSES device during host reset (bsc#1117108). - scsi: mpt3sas: Fix sparse warnings (bsc#1117108). - scsi: mpt3sas: Fix, False timeout prints for ioctl and other internal commands during controller reset (bsc#1117108). - scsi: mpt3sas: Fixed memory leaks in driver (bsc#1117108). - scsi: mpt3sas: For NVME device, issue a protocol level reset (bsc#1117108). - scsi: mpt3sas: Handle NVMe PCIe device related events generated from firmware (bsc#1117108). - scsi: mpt3sas: Improve kernel-doc headers (bsc#1117108). - scsi: mpt3sas: Incorrect command status was set/marked as not used (bsc#1117108). - scsi: mpt3sas: Increase event log buffer to support 24 port HBA's (bsc#1117108). - scsi: mpt3sas: Introduce API to get BAR0 mapped buffer address (bsc#1117108). - scsi: mpt3sas: Introduce Base function for cloning (bsc#1117108). - scsi: mpt3sas: Introduce function to clone mpi reply (bsc#1117108). - scsi: mpt3sas: Introduce function to clone mpi request (bsc#1117108). - scsi: mpt3sas: Introduce mpt3sas_get_st_from_smid() (bsc#1117108). - scsi: mpt3sas: Introduce struct mpt3sas_nvme_cmd (bsc#1117108). - scsi: mpt3sas: Lockless access for chain buffers (bsc#1117108). - scsi: mpt3sas: NVMe drive support for BTDHMAPPING ioctl command and log info (bsc#1117108). - scsi: mpt3sas: Optimize I/O memory consumption in driver (bsc#1117108). - scsi: mpt3sas: Pre-allocate RDPQ Array at driver boot time (bsc#1117108). - scsi: mpt3sas: Processing of Cable Exception events (bsc#1117108). - scsi: mpt3sas: Reduce memory footprint in kdump kernel (bsc#1117108). - scsi: mpt3sas: Remove KERN_WARNING from panic uses (bsc#1117108). - scsi: mpt3sas: Remove set-but-not-used variables (bsc#1117108). - scsi: mpt3sas: Remove unnecessary parentheses and simplify null checks (bsc#1117108). - scsi: mpt3sas: Remove unused macro MPT3SAS_FMT (bsc#1117108). - scsi: mpt3sas: Remove unused variable requeue_event (bsc#1117108). - scsi: mpt3sas: Replace PCI pool old API (bsc#1117108). - scsi: mpt3sas: Replace PCI pool old API (bsc#1117108). - scsi: mpt3sas: Report Firmware Package Version from HBA Driver (bsc#1117108). - scsi: mpt3sas: SGL to PRP Translation for I/Os to NVMe devices (bsc#1117108). - scsi: mpt3sas: Set NVMe device queue depth as 128 (bsc#1117108). - scsi: mpt3sas: Split _base_reset_handler(), mpt3sas_scsih_reset_handler() and mpt3sas_ctl_reset_handler() (bsc#1117108). - scsi: mpt3sas: Swap I/O memory read value back to cpu endianness (bsc#1117108). - scsi: mpt3sas: Update MPI Headers (bsc#1117108). - scsi: mpt3sas: Update driver version "25.100.00.00" (bsc#1117108). - scsi: mpt3sas: Update driver version "26.100.00.00" (bsc#1117108). - scsi: mpt3sas: Update mpt3sas driver version (bsc#1117108). - scsi: mpt3sas: Updated MPI headers to v2.00.48 (bsc#1117108). - scsi: mpt3sas: Use dma_pool_zalloc (bsc#1117108). - scsi: mpt3sas: always use first reserved smid for ioctl passthrough (bsc#1117108). - scsi: mpt3sas: check command status before attempting abort (bsc#1117108). - scsi: mpt3sas: clarify mmio pointer types (bsc#1117108). - scsi: mpt3sas: cleanup _scsih_pcie_enumeration_event() (bsc#1117108). - scsi: mpt3sas: fix an out of bound write (bsc#1117108). - scsi: mpt3sas: fix dma_addr_t casts (bsc#1117108). - scsi: mpt3sas: fix format overflow warning (bsc#1117108). - scsi: mpt3sas: fix oops in error handlers after shutdown/unload (bsc#1117108). - scsi: mpt3sas: fix possible memory leak (bsc#1117108). - scsi: mpt3sas: fix pr_info message continuation (bsc#1117108). - scsi: mpt3sas: fix spelling mistake: "disbale" -> "disable" (bsc#1117108). - scsi: mpt3sas: lockless command submission (bsc#1117108). - scsi: mpt3sas: make function _get_st_from_smid static (bsc#1117108). - scsi: mpt3sas: open-code _scsih_scsi_lookup_get() (bsc#1117108). - scsi: mpt3sas: remove a stray KERN_INFO (bsc#1117108). - scsi: mpt3sas: remove redundant copy_from_user in _ctl_getiocinfo (bsc#1117108). - scsi: mpt3sas: remove redundant wmb (bsc#1117108). - scsi: mpt3sas: scan and add nvme device after controller reset (bsc#1117108). - scsi: mpt3sas: separate out _base_recovery_check() (bsc#1117108). - scsi: mpt3sas: set default value for cb_idx (bsc#1117108). - scsi: mpt3sas: simplify _wait_for_commands_to_complete() (bsc#1117108). - scsi: mpt3sas: simplify mpt3sas_scsi_issue_tm() (bsc#1117108). - scsi: mpt3sas: simplify task management functions (bsc#1117108). - scsi: mpt3sas: switch to generic DMA API (bsc#1117108). - scsi: mpt3sas: switch to pci_alloc_irq_vectors (bsc#1117108). - scsi: mpt3sas: use list_splice_init() (bsc#1117108). - scsi: mpt3sas: wait for and flush running commands on shutdown/unload (bsc#1117108). - scsi: qla2xxx: Fix deadlock between ATIO and HW lock (bsc#1125794). - scsi: target: make the pi_prot_format ConfigFS path readable (bsc#1123933). - sd: disable logical block provisioning if 'lbpme' is not set (bsc#1086095 bsc#1078355). - seq_buf: Make seq_buf_puts() null-terminate the buffer (bnc#1012382). - serial: fsl_lpuart: clear parity enable bit when disable parity (bnc#1012382). - signal: Always notice exiting tasks (bnc#1012382). - signal: Better detection of synchronous signals (bnc#1012382). - signal: Restore the stop PTRACE_EVENT_EXIT (bnc#1012382). - skge: potential memory corruption in skge_get_regs() (bnc#1012382). - smack: fix access permissions for keyring (bnc#1012382). - smsc95xx: Use skb_cow_head to deal with cloned skbs (bnc#1012382). - soc/tegra: Do not leak device tree node reference (bnc#1012382). - staging: iio: ad7780: update voltage on read (bnc#1012382). - staging: iio: adc: ad7280a: handle error from __ad7280_read32() (bnc#1012382). - staging: rtl8188eu: Add device code for D-Link DWA-121 rev B1 (bnc#1012382). - staging:iio:ad2s90: Make probe handle spi_setup failure (bnc#1012382). - sunvdc: Do not spin in an infinite loop when vio_ldc_send() returns EAGAIN (bnc#1012382). - test_hexdump: use memcpy instead of strncpy (bnc#1012382). - thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set (bnc#1012382). - timekeeping: Use proper seqcount initializer (bnc#1012382). - tipc: use destination length for copy string (bnc#1012382). - tracing/uprobes: Fix output for multiple string arguments (bnc#1012382). - tty/ldsem: Add lockdep asserts for ldisc_sem (bnc#1105428). - tty/ldsem: Convert to regular lockdep annotations (bnc#1105428). - tty/ldsem: Decrement wait_readers on timeouted down_read() (bnc#1105428). - tty/n_hdlc: fix __might_sleep warning (bnc#1012382). - tty: Do not block on IO when ldisc change is pending (bnc#1105428). - tty: Do not hold ldisc lock in tty_reopen() if ldisc present (bnc#1105428). - tty: Handle problem if line discipline does not have receive_buf (bnc#1012382). - tty: Hold tty_ldisc_lock() during tty_reopen() (bnc#1105428). - tty: Simplify tty->count math in tty_reopen() (bnc#1105428). - tty: fix data race between tty_init_dev and flush of buf (bnc#1105428). - tty: serial: samsung: Properly set flags in autoCTS mode (bnc#1012382). - uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define (bnc#1012382). - uapi/if_ether.h: prevent redefinition of struct ethhdr (bnc#1012382). - ucc_geth: Reset BQL queue when stopping device (bnc#1012382). - udf: Fix BUG on corrupted inode (bnc#1012382). - um: Avoid marking pages with "changed protection" (bnc#1012382). - usb: dwc2: Remove unnecessary kfree (bnc#1012382). - usb: gadget: udc: net2272: Fix bitwise and boolean operations (bnc#1012382). - usb: hub: delay hub autosuspend if USB3 port is still link training (bnc#1012382). - usb: phy: am335x: fix race condition in _probe (bnc#1012382). - usb: serial: pl2303: add new PID to support PL2303TB (bnc#1012382). - usb: serial: simple: add Motorola Tetra TPG2200 device id (bnc#1012382). - video: clps711x-fb: release disp device node in probe() (bnc#1012382). - vt: invoke notifier on screen size change (bnc#1012382). - x86/MCE: Initialize mce.bank in the case of a fatal error in mce_no_way_out() (bnc#1012382). - x86/PCI: Fix Broadcom CNB20LE unintended sign extension (redux) (bnc#1012382). - x86/a.out: Clear the dump structure initially (bnc#1012382). - x86/fpu: Add might_fault() to user_insn() (bnc#1012382). - x86/kaslr: Fix incorrect i8254 outb() parameters (bnc#1012382). - x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls (bnc#1012382). - x86/xen: dont add memory above max allowed allocation (bsc#1117645). - x86: respect memory size limiting via mem= parameter (bsc#1117645). - xfrm6_tunnel: Fix spi check in __xfrm6_tunnel_alloc_spi (bnc#1012382). - xfrm: refine validation of template and selector families (bnc#1012382). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-274=1 Package List: - openSUSE Leap 42.3 (noarch): kernel-devel-4.4.175-89.1 kernel-docs-4.4.175-89.1 kernel-docs-html-4.4.175-89.1 kernel-docs-pdf-4.4.175-89.1 kernel-macros-4.4.175-89.1 kernel-source-4.4.175-89.1 kernel-source-vanilla-4.4.175-89.1 - openSUSE Leap 42.3 (x86_64): kernel-debug-4.4.175-89.1 kernel-debug-base-4.4.175-89.1 kernel-debug-base-debuginfo-4.4.175-89.1 kernel-debug-debuginfo-4.4.175-89.1 kernel-debug-debugsource-4.4.175-89.1 kernel-debug-devel-4.4.175-89.1 kernel-debug-devel-debuginfo-4.4.175-89.1 kernel-default-4.4.175-89.1 kernel-default-base-4.4.175-89.1 kernel-default-base-debuginfo-4.4.175-89.1 kernel-default-debuginfo-4.4.175-89.1 kernel-default-debugsource-4.4.175-89.1 kernel-default-devel-4.4.175-89.1 kernel-obs-build-4.4.175-89.1 kernel-obs-build-debugsource-4.4.175-89.1 kernel-obs-qa-4.4.175-89.1 kernel-syms-4.4.175-89.1 kernel-vanilla-4.4.175-89.1 kernel-vanilla-base-4.4.175-89.1 kernel-vanilla-base-debuginfo-4.4.175-89.1 kernel-vanilla-debuginfo-4.4.175-89.1 kernel-vanilla-debugsource-4.4.175-89.1 kernel-vanilla-devel-4.4.175-89.1 References: https://www.suse.com/security/cve/CVE-2018-5391.html https://www.suse.com/security/cve/CVE-2019-3459.html https://www.suse.com/security/cve/CVE-2019-3460.html https://www.suse.com/security/cve/CVE-2019-7221.html https://www.suse.com/security/cve/CVE-2019-7222.html https://bugzilla.suse.com/1012382 https://bugzilla.suse.com/1020413 https://bugzilla.suse.com/1031492 https://bugzilla.suse.com/1042286 https://bugzilla.suse.com/1050549 https://bugzilla.suse.com/1078355 https://bugzilla.suse.com/1086095 https://bugzilla.suse.com/1086652 https://bugzilla.suse.com/1099810 https://bugzilla.suse.com/1103097 https://bugzilla.suse.com/1105428 https://bugzilla.suse.com/1106061 https://bugzilla.suse.com/1106929 https://bugzilla.suse.com/1116345 https://bugzilla.suse.com/1117108 https://bugzilla.suse.com/1117645 https://bugzilla.suse.com/1117744 https://bugzilla.suse.com/1120017 https://bugzilla.suse.com/1120758 https://bugzilla.suse.com/1120902 https://bugzilla.suse.com/1123933 https://bugzilla.suse.com/1124166 https://bugzilla.suse.com/1124732 https://bugzilla.suse.com/1124735 https://bugzilla.suse.com/1124775 https://bugzilla.suse.com/1124777 https://bugzilla.suse.com/1124780 https://bugzilla.suse.com/1124811 https://bugzilla.suse.com/1125000 https://bugzilla.suse.com/1125014 https://bugzilla.suse.com/1125446 https://bugzilla.suse.com/1125794 https://bugzilla.suse.com/1125796 https://bugzilla.suse.com/1125808 https://bugzilla.suse.com/1125809 https://bugzilla.suse.com/1125810 https://bugzilla.suse.com/1125892 https://bugzilla.suse.com/802154

1 0

openSUSE-RU-2019:0272-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 01 Mar '19

01 Mar '19

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:0272-1 Rating: moderate References: #1111966 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tomcat provides the following fixes: - Increase the maximum number of threads and open files for tomcat. (bsc#1111966) - Fix the JMX error: ThreadPool.socketProperties is not Serializable. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-272=1 Package List: - openSUSE Leap 42.3 (noarch): tomcat-8.0.53-21.1 tomcat-admin-webapps-8.0.53-21.1 tomcat-docs-webapp-8.0.53-21.1 tomcat-el-3_0-api-8.0.53-21.1 tomcat-embed-8.0.53-21.1 tomcat-javadoc-8.0.53-21.1 tomcat-jsp-2_3-api-8.0.53-21.1 tomcat-jsvc-8.0.53-21.1 tomcat-lib-8.0.53-21.1 tomcat-servlet-3_1-api-8.0.53-21.1 tomcat-webapps-8.0.53-21.1 References: https://bugzilla.suse.com/1111966

1 0