March 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1065-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1065-1 Rating: moderate References: #1127891 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issues: - Check SUSE kernel module dependencies recursively (bsc#1127891) - Avoid "Failed to chown ... Operation not permitted" when run from non-root, by not copying xattrs. (osc#1092178) - Handle non-versioned dependency in purge-kernels. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1065=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-044.2-lp150.14.27.1 dracut-debuginfo-044.2-lp150.14.27.1 dracut-debugsource-044.2-lp150.14.27.1 dracut-fips-044.2-lp150.14.27.1 dracut-ima-044.2-lp150.14.27.1 dracut-tools-044.2-lp150.14.27.1 References: https://bugzilla.suse.com/1127891

1 0

openSUSE-RU-2019:1071-1: moderate: Recommended update for fence-agents
by maintenance＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Recommended Update: Recommended update for fence-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1071-1 Rating: moderate References: #1088358 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fence-agents fixes the following issues: A new Google Compute Engine image client was added (fence_ge): - fence_gce: new agent (pull#159) (fate#325539) (bsc#1088358) - fence_gce: zone & project parameters are mandatory (pull#177) (fate#325539) (bsc#1088358) - fence_gce: Clean up and log errors (pull#194) (fate#325539) (bsc#1088358) - fence_gce: google-auth instead of oauth2client (pull#197) - fence_gce: logging and non required parameters (pull##211) - fence_gce: filter call to aggregatedList (pull#218) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1071=1 Package List: - openSUSE Leap 42.3 (x86_64): fence-agents-4.0.25+git.1485179354.eb43835-2.9.1 fence-agents-debuginfo-4.0.25+git.1485179354.eb43835-2.9.1 fence-agents-debugsource-4.0.25+git.1485179354.eb43835-2.9.1 fence-agents-devel-4.0.25+git.1485179354.eb43835-2.9.1 References: https://bugzilla.suse.com/1088358

1 0

openSUSE-RU-2019:1067-1: moderate: Recommended update for Salt
by maintenance＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Recommended Update: Recommended update for Salt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1067-1 Rating: moderate References: #1122663 #1123865 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update fixes the following issues: salt: - Don't call zypper with more than one --no-refresh parameter (bsc#1123865) - Include aliases in FQDNS grain - Prevents error when there is no job entry in filesystem cache due to race condition in minion onboarding (bsc#1122663) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1067=1 Package List: - openSUSE Leap 15.0 (x86_64): python2-salt-2018.3.0-lp150.3.24.1 python3-salt-2018.3.0-lp150.3.24.1 salt-2018.3.0-lp150.3.24.1 salt-api-2018.3.0-lp150.3.24.1 salt-cloud-2018.3.0-lp150.3.24.1 salt-doc-2018.3.0-lp150.3.24.1 salt-master-2018.3.0-lp150.3.24.1 salt-minion-2018.3.0-lp150.3.24.1 salt-proxy-2018.3.0-lp150.3.24.1 salt-ssh-2018.3.0-lp150.3.24.1 salt-syndic-2018.3.0-lp150.3.24.1 - openSUSE Leap 15.0 (noarch): salt-bash-completion-2018.3.0-lp150.3.24.1 salt-fish-completion-2018.3.0-lp150.3.24.1 salt-zsh-completion-2018.3.0-lp150.3.24.1 References: https://bugzilla.suse.com/1122663 https://bugzilla.suse.com/1123865

1 0

openSUSE-SU-2019:1058-1: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1058-1 Rating: low References: #1128649 Cross-References: CVE-2019-7175 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for GraphicsMagick fixes the following issue: Security issues fixed: - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1058=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-129.1 GraphicsMagick-debuginfo-1.3.25-129.1 GraphicsMagick-debugsource-1.3.25-129.1 GraphicsMagick-devel-1.3.25-129.1 libGraphicsMagick++-Q16-12-1.3.25-129.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-129.1 libGraphicsMagick++-devel-1.3.25-129.1 libGraphicsMagick-Q16-3-1.3.25-129.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-129.1 libGraphicsMagick3-config-1.3.25-129.1 libGraphicsMagickWand-Q16-2-1.3.25-129.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-129.1 perl-GraphicsMagick-1.3.25-129.1 perl-GraphicsMagick-debuginfo-1.3.25-129.1 References: https://www.suse.com/security/cve/CVE-2019-7175.html https://bugzilla.suse.com/1128649

1 0

openSUSE-RU-2019:1060-1: Recommended update for feh
by maintenance＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Recommended Update: Recommended update for feh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1060-1 Rating: low References: #1101466 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for feh fixes the following issue: - feh crashed on right-click when user tried to open menu (boo#1101466) This update also contains a number of upstream bug fixes in the 2.27.1 release. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1060=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): feh-2.27.1-bp150.2.3.1 References: https://bugzilla.suse.com/1101466

1 0

openSUSE-SU-2019:1059-1: moderate: Security update for lftp
by opensuse-security＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Security Update: Security update for lftp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1059-1 Rating: moderate References: #1103367 #1120946 Cross-References: CVE-2018-10916 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code detects password prompts more reliably (bsc#1120946). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1059=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): lftp-4.7.4-2.6.1 lftp-debuginfo-4.7.4-2.6.1 lftp-debugsource-4.7.4-2.6.1 References: https://www.suse.com/security/cve/CVE-2018-10916.html https://bugzilla.suse.com/1103367 https://bugzilla.suse.com/1120946

1 0

openSUSE-RU-2019:1061-1: Recommended update for gcompris-qt
by maintenance＠opensuse.org 28 Mar '19

28 Mar '19

openSUSE Recommended Update: Recommended update for gcompris-qt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1061-1 Rating: low References: #1093988 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gcompris-qt fixes the following issue (boo#1093988): - text corrections and translation updates - UI position and element interaction corrections - fixes to audio in several activities - corrections and improvements to multiple activities gcompris-qt-voices was updated to match. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1061=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): gcompris-qt-0.91-bp150.2.3.1 gcompris-qt-debuginfo-0.91-bp150.2.3.1 gcompris-qt-debugsource-0.91-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): gcompris-qt-activities-0.91-bp150.2.3.1 gcompris-qt-lang-0.91-bp150.2.3.1 gcompris-qt-voices-0~20180517-bp150.2.3.1 References: https://bugzilla.suse.com/1093988

1 0

openSUSE-SU-2019:1056-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 27 Mar '19

27 Mar '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1056-1 Rating: important References: #1129821 #1130262 Cross-References: CVE-2018-18506 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795 CVE-2019-9796 CVE-2019-9810 CVE-2019-9813 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 60.6.1esr (MFSA 2019-10 boo#1130262) * CVE-2019-9810: IonMonkey MArraySlice has incorrect alias information * CVE-2019-9813: Ionmonkey type confusion with __proto__ mutations Mozilla Firefox was updated to 60.6.0esr (MFSA 2019-08 boo#1129821) * CVE-2019-9790: Use-after-free when removing in-use DOM elements * CVE-2019-9791: Type inference is incorrect for constructors entered through on-stack replacement with IonMonkey * CVE-2019-9792: IonMonkey leaks JS_OPTIMIZED_OUT magic value to script * CVE-2019-9793: Improper bounds checks when Spectre mitigations are disabled * CVE-2019-9794: Command line arguments not discarded during execution * CVE-2019-9795: Type-confusion in IonMonkey JIT compiler * CVE-2019-9796: Use-after-free with SMIL animation controller * CVE-2018-18506: Proxy Auto-Configuration file can define localhost access to be proxied * CVE-2019-9788: Memory safety bugs fixed in Firefox 66 and Firefox ESR 60.6 Mozilla Firefox was updated to 60.5.2esr: * Fix a frequent crash when reading various Reuters news articles Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1056=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.6.1-135.1 MozillaFirefox-branding-upstream-60.6.1-135.1 MozillaFirefox-buildsymbols-60.6.1-135.1 MozillaFirefox-debuginfo-60.6.1-135.1 MozillaFirefox-debugsource-60.6.1-135.1 MozillaFirefox-devel-60.6.1-135.1 MozillaFirefox-translations-common-60.6.1-135.1 MozillaFirefox-translations-other-60.6.1-135.1 References: https://www.suse.com/security/cve/CVE-2018-18506.html https://www.suse.com/security/cve/CVE-2019-9788.html https://www.suse.com/security/cve/CVE-2019-9790.html https://www.suse.com/security/cve/CVE-2019-9791.html https://www.suse.com/security/cve/CVE-2019-9792.html https://www.suse.com/security/cve/CVE-2019-9793.html https://www.suse.com/security/cve/CVE-2019-9794.html https://www.suse.com/security/cve/CVE-2019-9795.html https://www.suse.com/security/cve/CVE-2019-9796.html https://www.suse.com/security/cve/CVE-2019-9810.html https://www.suse.com/security/cve/CVE-2019-9813.html https://bugzilla.suse.com/1129821 https://bugzilla.suse.com/1130262

1 0

openSUSE-OU-2019:1057-1: moderate: Optional update for Chromium dependencies
by maintenance＠opensuse.org 27 Mar '19

27 Mar '19

openSUSE Optional Update: Optional update for Chromium dependencies ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:1057-1 Rating: moderate References: #1095545 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update contains a number of updated dependencies for Chromium, including ffmpeg 4. New package ffmpeg-4: - Builds ffmpeg 4 libraries New package ffmpeg-3: - Builds ffmpeg 3 libraries and command line utilities Changes in zeromq, codec2, libsodium: - baselibs.conf changes required for ffmpeg 4 This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1057=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): codec2-0.6-bp150.4.3.1 codec2-debuginfo-0.6-bp150.4.3.1 codec2-debugsource-0.6-bp150.4.3.1 codec2-devel-0.6-bp150.4.3.1 ffmpeg-4-libavcodec-devel-4.0.1-bp150.18.1 ffmpeg-4-libavdevice-devel-4.0.1-bp150.18.1 ffmpeg-4-libavfilter-devel-4.0.1-bp150.18.1 ffmpeg-4-libavformat-devel-4.0.1-bp150.18.1 ffmpeg-4-libavresample-devel-4.0.1-bp150.18.1 ffmpeg-4-libavutil-devel-4.0.1-bp150.18.1 ffmpeg-4-libpostproc-devel-4.0.1-bp150.18.1 ffmpeg-4-libswresample-devel-4.0.1-bp150.18.1 ffmpeg-4-libswscale-devel-4.0.1-bp150.18.1 ffmpeg-4-private-devel-4.0.1-bp150.18.1 libavcodec58-4.0.1-bp150.18.1 libavdevice58-4.0.1-bp150.18.1 libavfilter7-4.0.1-bp150.18.1 libavformat58-4.0.1-bp150.18.1 libavresample4-4.0.1-bp150.18.1 libavutil56-4.0.1-bp150.18.1 libcodec2-0_6-0.6-bp150.4.3.1 libcodec2-0_6-debuginfo-0.6-bp150.4.3.1 libpostproc55-4.0.1-bp150.18.1 libswresample3-4.0.1-bp150.18.1 libswscale5-4.0.1-bp150.18.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libavcodec58-64bit-4.0.1-bp150.18.1 libavdevice58-64bit-4.0.1-bp150.18.1 libavfilter7-64bit-4.0.1-bp150.18.1 libavformat58-64bit-4.0.1-bp150.18.1 libavresample4-64bit-4.0.1-bp150.18.1 libavutil56-64bit-4.0.1-bp150.18.1 libcodec2-0_6-64bit-0.6-bp150.4.3.1 libcodec2-0_6-64bit-debuginfo-0.6-bp150.4.3.1 libpostproc55-64bit-4.0.1-bp150.18.1 libswresample3-64bit-4.0.1-bp150.18.1 libswscale5-64bit-4.0.1-bp150.18.1 - openSUSE Backports SLE-15 (noarch): codec2-examples-0.6-bp150.4.3.1 References: https://bugzilla.suse.com/1095545

1 0

openSUSE-RU-2019:1055-1: moderate: Recommended update for sbd
by maintenance＠opensuse.org 26 Mar '19

26 Mar '19

openSUSE Recommended Update: Recommended update for sbd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1055-1 Rating: moderate References: #1102930 #1107321 #1112918 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sbd fixes the following issues: Updated to version 1.4.0+20190123.1829c40: - sbd.sysconfig: watchdog timeout set in the on-disk metadata takes precedence - sbd.8.pod: use the generic term "cluster services" instead of the specific "openais" (bsc#1112918) - make timeout-action executed by sbd configurable - use pacemaker's new pe api with constructors/destructors - sbd-common: avoid statting potential links - sbd-inquisitor: SBD_DELAY_START can be configured with a delay value (bsc#1107321) - sbd-common: don't follow symlinks outside /dev for watchdog This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1055=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): sbd-1.4.0+20190123.1829c40-3.6.1 sbd-debuginfo-1.4.0+20190123.1829c40-3.6.1 sbd-debugsource-1.4.0+20190123.1829c40-3.6.1 References: https://bugzilla.suse.com/1102930 https://bugzilla.suse.com/1107321 https://bugzilla.suse.com/1112918

1 0