April 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:1295-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1295-1 Rating: moderate References: #1132053 #1132054 #1132055 #1132058 #1132060 #1132061 Cross-References: CVE-2019-11005 CVE-2019-11006 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-11010 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-11005: Fixed a stack-based buffer overflow in SVGStartElement of coders/svg.c that allowed attackers to cause DOS or an unspecified impact (boo#1132058) - CVE-2019-11006: Fixed a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c that allowed attackers to cause DOS or information disclosure (boo#1132061) - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of coders/mpc.c that which allowed attackers to cause DOS via a crafted image file (boo#1132055) - CVE-2019-11007: Fixed a heap-based buffer over-read in the ReadMNGImage function of coders/png.c that which allowed attackers to cause a denial of service or information disclosure (boo#1132060) - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c that which allowed remote attackers to cause DOS or other unspecified impact (boo#1132054) - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c that which allowed attackers to cause DOS or information disclosure (boo#1132053) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1295=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.18.1 GraphicsMagick-devel-1.3.29-bp150.2.18.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.18.1 libGraphicsMagick++-devel-1.3.29-bp150.2.18.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.18.1 libGraphicsMagick3-config-1.3.29-bp150.2.18.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.18.1 perl-GraphicsMagick-1.3.29-bp150.2.18.1 References: https://www.suse.com/security/cve/CVE-2019-11005.html https://www.suse.com/security/cve/CVE-2019-11006.html https://www.suse.com/security/cve/CVE-2019-11007.html https://www.suse.com/security/cve/CVE-2019-11008.html https://www.suse.com/security/cve/CVE-2019-11009.html https://www.suse.com/security/cve/CVE-2019-11010.html https://bugzilla.suse.com/1132053 https://bugzilla.suse.com/1132054 https://bugzilla.suse.com/1132055 https://bugzilla.suse.com/1132058 https://bugzilla.suse.com/1132060 https://bugzilla.suse.com/1132061

1 0

openSUSE-RU-2019:1297-1: moderate: Recommended update for python-python-gnupg
by maintenance＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Recommended Update: Recommended update for python-python-gnupg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1297-1 Rating: moderate References: #1130083 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python-gnupg fixes the following issues: - Switch to pytest runner, which seems to be a way more stable in providing the results. (boo#1130083) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1297=1 Package List: - openSUSE Backports SLE-15 (noarch): python2-python-gnupg-0.4.4-bp150.2.6.1 python3-python-gnupg-0.4.4-bp150.2.6.1 References: https://bugzilla.suse.com/1130083

1 0

openSUSE-RU-2019:1296-1: moderate: Recommended update for pugixml
by maintenance＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Recommended Update: Recommended update for pugixml ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1296-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pugixml fixes the following issues: - Ship a pkg-config file. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1296=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libpugixml1-1.9-bp150.3.3.1 pugixml-devel-1.9-bp150.3.3.1 References:

1 0

openSUSE-SU-2019:1292-1: moderate: Security update for samba
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1292-1 Rating: moderate References: #1099590 #1123755 #1124223 #1127153 #1131060 Cross-References: CVE-2019-3880 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). Non-security issues fixed: - Fix vfs_ceph ftruncate and fallocate handling (bsc#1127153). - Abide by load_printers smb.conf parameter (bsc#1124223). - s3:winbindd: let normalize_name_map() call find_domain_from_name_noinit() (bsc#1123755). - s3:passdb: Do not return OK if we don't have pinfo set up (bsc#1099590). - s3:winbind: Fix regression (bsc#1123755). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1292=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.16+git.154.2998451b912-27.1 ctdb-debuginfo-4.6.16+git.154.2998451b912-27.1 ctdb-tests-4.6.16+git.154.2998451b912-27.1 ctdb-tests-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc-devel-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr-devel-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-debuginfo-4.6.16+git.154.2998451b912-27.1 libdcerpc0-4.6.16+git.154.2998451b912-27.1 libdcerpc0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-devel-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac-devel-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-nbt-devel-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr-standard-devel-4.6.16+git.154.2998451b912-27.1 libndr-standard0-4.6.16+git.154.2998451b912-27.1 libndr-standard0-debuginfo-4.6.16+git.154.2998451b912-27.1 libndr0-4.6.16+git.154.2998451b912-27.1 libndr0-debuginfo-4.6.16+git.154.2998451b912-27.1 libnetapi-devel-4.6.16+git.154.2998451b912-27.1 libnetapi0-4.6.16+git.154.2998451b912-27.1 libnetapi0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-credentials-devel-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-errors-devel-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig-devel-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-passdb-devel-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-policy-devel-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamba-util-devel-4.6.16+git.154.2998451b912-27.1 libsamba-util0-4.6.16+git.154.2998451b912-27.1 libsamba-util0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsamdb-devel-4.6.16+git.154.2998451b912-27.1 libsamdb0-4.6.16+git.154.2998451b912-27.1 libsamdb0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbclient-devel-4.6.16+git.154.2998451b912-27.1 libsmbclient0-4.6.16+git.154.2998451b912-27.1 libsmbclient0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbconf-devel-4.6.16+git.154.2998451b912-27.1 libsmbconf0-4.6.16+git.154.2998451b912-27.1 libsmbconf0-debuginfo-4.6.16+git.154.2998451b912-27.1 libsmbldap-devel-4.6.16+git.154.2998451b912-27.1 libsmbldap0-4.6.16+git.154.2998451b912-27.1 libsmbldap0-debuginfo-4.6.16+git.154.2998451b912-27.1 libtevent-util-devel-4.6.16+git.154.2998451b912-27.1 libtevent-util0-4.6.16+git.154.2998451b912-27.1 libtevent-util0-debuginfo-4.6.16+git.154.2998451b912-27.1 libwbclient-devel-4.6.16+git.154.2998451b912-27.1 libwbclient0-4.6.16+git.154.2998451b912-27.1 libwbclient0-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-4.6.16+git.154.2998451b912-27.1 samba-client-4.6.16+git.154.2998451b912-27.1 samba-client-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-core-devel-4.6.16+git.154.2998451b912-27.1 samba-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-debugsource-4.6.16+git.154.2998451b912-27.1 samba-libs-4.6.16+git.154.2998451b912-27.1 samba-libs-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-pidl-4.6.16+git.154.2998451b912-27.1 samba-python-4.6.16+git.154.2998451b912-27.1 samba-python-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-test-4.6.16+git.154.2998451b912-27.1 samba-test-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-winbind-4.6.16+git.154.2998451b912-27.1 samba-winbind-debuginfo-4.6.16+git.154.2998451b912-27.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-binding0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc-samr0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc0-32bit-4.6.16+git.154.2998451b912-27.1 libdcerpc0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-krb5pac0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-nbt0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr-standard0-32bit-4.6.16+git.154.2998451b912-27.1 libndr-standard0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libndr0-32bit-4.6.16+git.154.2998451b912-27.1 libndr0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libnetapi0-32bit-4.6.16+git.154.2998451b912-27.1 libnetapi0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-credentials0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-errors0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-hostconfig0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-passdb0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-policy0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-util0-32bit-4.6.16+git.154.2998451b912-27.1 libsamba-util0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsamdb0-32bit-4.6.16+git.154.2998451b912-27.1 libsamdb0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbclient0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbclient0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbconf0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbconf0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libsmbldap0-32bit-4.6.16+git.154.2998451b912-27.1 libsmbldap0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libtevent-util0-32bit-4.6.16+git.154.2998451b912-27.1 libtevent-util0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 libwbclient0-32bit-4.6.16+git.154.2998451b912-27.1 libwbclient0-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-ceph-4.6.16+git.154.2998451b912-27.1 samba-ceph-debuginfo-4.6.16+git.154.2998451b912-27.1 samba-client-32bit-4.6.16+git.154.2998451b912-27.1 samba-client-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-libs-32bit-4.6.16+git.154.2998451b912-27.1 samba-libs-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 samba-winbind-32bit-4.6.16+git.154.2998451b912-27.1 samba-winbind-debuginfo-32bit-4.6.16+git.154.2998451b912-27.1 - openSUSE Leap 42.3 (noarch): samba-doc-4.6.16+git.154.2998451b912-27.1 References: https://www.suse.com/security/cve/CVE-2019-3880.html https://bugzilla.suse.com/1099590 https://bugzilla.suse.com/1123755 https://bugzilla.suse.com/1124223 https://bugzilla.suse.com/1127153 https://bugzilla.suse.com/1131060

1 0

openSUSE-SU-2019:1294-1: moderate: Security update for libvirt
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1294-1 Rating: moderate References: #1120813 #1126325 #1127458 #1131595 #1131955 Cross-References: CVE-2019-3840 CVE-2019-3886 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for libvirt fixes the following issues: Security issues fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). - CVE-2019-3886: Fixed an information leak which allowed to retrieve the guest hostname under readonly mode (bsc#1131595). Other issue addressed: - cpu: add Skylake-Server and Skylake-Server-IBRS CPU models (FATE#327261, bsc#1131955) - libxl: save current memory value after successful balloon (bsc#1120813). - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: add new 'xenbus' controller type This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1294=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libvirt-3.3.0-24.1 libvirt-admin-3.3.0-24.1 libvirt-admin-debuginfo-3.3.0-24.1 libvirt-client-3.3.0-24.1 libvirt-client-debuginfo-3.3.0-24.1 libvirt-daemon-3.3.0-24.1 libvirt-daemon-config-network-3.3.0-24.1 libvirt-daemon-config-nwfilter-3.3.0-24.1 libvirt-daemon-debuginfo-3.3.0-24.1 libvirt-daemon-driver-interface-3.3.0-24.1 libvirt-daemon-driver-interface-debuginfo-3.3.0-24.1 libvirt-daemon-driver-lxc-3.3.0-24.1 libvirt-daemon-driver-lxc-debuginfo-3.3.0-24.1 libvirt-daemon-driver-network-3.3.0-24.1 libvirt-daemon-driver-network-debuginfo-3.3.0-24.1 libvirt-daemon-driver-nodedev-3.3.0-24.1 libvirt-daemon-driver-nodedev-debuginfo-3.3.0-24.1 libvirt-daemon-driver-nwfilter-3.3.0-24.1 libvirt-daemon-driver-nwfilter-debuginfo-3.3.0-24.1 libvirt-daemon-driver-qemu-3.3.0-24.1 libvirt-daemon-driver-qemu-debuginfo-3.3.0-24.1 libvirt-daemon-driver-secret-3.3.0-24.1 libvirt-daemon-driver-secret-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-3.3.0-24.1 libvirt-daemon-driver-storage-core-3.3.0-24.1 libvirt-daemon-driver-storage-core-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-disk-3.3.0-24.1 libvirt-daemon-driver-storage-disk-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-iscsi-3.3.0-24.1 libvirt-daemon-driver-storage-iscsi-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-logical-3.3.0-24.1 libvirt-daemon-driver-storage-logical-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-mpath-3.3.0-24.1 libvirt-daemon-driver-storage-mpath-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-scsi-3.3.0-24.1 libvirt-daemon-driver-storage-scsi-debuginfo-3.3.0-24.1 libvirt-daemon-driver-uml-3.3.0-24.1 libvirt-daemon-driver-uml-debuginfo-3.3.0-24.1 libvirt-daemon-driver-vbox-3.3.0-24.1 libvirt-daemon-driver-vbox-debuginfo-3.3.0-24.1 libvirt-daemon-hooks-3.3.0-24.1 libvirt-daemon-lxc-3.3.0-24.1 libvirt-daemon-qemu-3.3.0-24.1 libvirt-daemon-uml-3.3.0-24.1 libvirt-daemon-vbox-3.3.0-24.1 libvirt-debugsource-3.3.0-24.1 libvirt-devel-3.3.0-24.1 libvirt-doc-3.3.0-24.1 libvirt-libs-3.3.0-24.1 libvirt-libs-debuginfo-3.3.0-24.1 libvirt-lock-sanlock-3.3.0-24.1 libvirt-lock-sanlock-debuginfo-3.3.0-24.1 libvirt-nss-3.3.0-24.1 libvirt-nss-debuginfo-3.3.0-24.1 - openSUSE Leap 42.3 (x86_64): libvirt-client-debuginfo-32bit-3.3.0-24.1 libvirt-daemon-driver-libxl-3.3.0-24.1 libvirt-daemon-driver-libxl-debuginfo-3.3.0-24.1 libvirt-daemon-driver-storage-rbd-3.3.0-24.1 libvirt-daemon-driver-storage-rbd-debuginfo-3.3.0-24.1 libvirt-daemon-xen-3.3.0-24.1 libvirt-devel-32bit-3.3.0-24.1 References: https://www.suse.com/security/cve/CVE-2019-3840.html https://www.suse.com/security/cve/CVE-2019-3886.html https://bugzilla.suse.com/1120813 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127458 https://bugzilla.suse.com/1131595 https://bugzilla.suse.com/1131955

1 0

openSUSE-SU-2019:1293-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1293-1 Rating: moderate References: #1126711 #1126713 #1126821 #1126823 #1127122 #1128722 #1128883 #1128886 #1128887 #1128889 #1128892 #1129032 Cross-References: CVE-2018-20783 CVE-2019-9020 CVE-2019-9021 CVE-2019-9023 CVE-2019-9024 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9640 CVE-2019-9641 CVE-2019-9675 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has one errata is now available. Description: This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-9637: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128892). - CVE-2019-9675: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128886). - CVE-2019-9638: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension ((bsc#1128889). - CVE-2019-9639: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128887). - CVE-2019-9640: Fixed improper implementation of rename function and multiple invalid memory access in EXIF extension (bsc#1128883). - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). Other issue addressed: - Deleted README.default_socket_timeout which is not needed anymore (bsc#1129032). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1293=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php7-7.0.7-58.1 apache2-mod_php7-debuginfo-7.0.7-58.1 php7-7.0.7-58.1 php7-bcmath-7.0.7-58.1 php7-bcmath-debuginfo-7.0.7-58.1 php7-bz2-7.0.7-58.1 php7-bz2-debuginfo-7.0.7-58.1 php7-calendar-7.0.7-58.1 php7-calendar-debuginfo-7.0.7-58.1 php7-ctype-7.0.7-58.1 php7-ctype-debuginfo-7.0.7-58.1 php7-curl-7.0.7-58.1 php7-curl-debuginfo-7.0.7-58.1 php7-dba-7.0.7-58.1 php7-dba-debuginfo-7.0.7-58.1 php7-debuginfo-7.0.7-58.1 php7-debugsource-7.0.7-58.1 php7-devel-7.0.7-58.1 php7-dom-7.0.7-58.1 php7-dom-debuginfo-7.0.7-58.1 php7-enchant-7.0.7-58.1 php7-enchant-debuginfo-7.0.7-58.1 php7-exif-7.0.7-58.1 php7-exif-debuginfo-7.0.7-58.1 php7-fastcgi-7.0.7-58.1 php7-fastcgi-debuginfo-7.0.7-58.1 php7-fileinfo-7.0.7-58.1 php7-fileinfo-debuginfo-7.0.7-58.1 php7-firebird-7.0.7-58.1 php7-firebird-debuginfo-7.0.7-58.1 php7-fpm-7.0.7-58.1 php7-fpm-debuginfo-7.0.7-58.1 php7-ftp-7.0.7-58.1 php7-ftp-debuginfo-7.0.7-58.1 php7-gd-7.0.7-58.1 php7-gd-debuginfo-7.0.7-58.1 php7-gettext-7.0.7-58.1 php7-gettext-debuginfo-7.0.7-58.1 php7-gmp-7.0.7-58.1 php7-gmp-debuginfo-7.0.7-58.1 php7-iconv-7.0.7-58.1 php7-iconv-debuginfo-7.0.7-58.1 php7-imap-7.0.7-58.1 php7-imap-debuginfo-7.0.7-58.1 php7-intl-7.0.7-58.1 php7-intl-debuginfo-7.0.7-58.1 php7-json-7.0.7-58.1 php7-json-debuginfo-7.0.7-58.1 php7-ldap-7.0.7-58.1 php7-ldap-debuginfo-7.0.7-58.1 php7-mbstring-7.0.7-58.1 php7-mbstring-debuginfo-7.0.7-58.1 php7-mcrypt-7.0.7-58.1 php7-mcrypt-debuginfo-7.0.7-58.1 php7-mysql-7.0.7-58.1 php7-mysql-debuginfo-7.0.7-58.1 php7-odbc-7.0.7-58.1 php7-odbc-debuginfo-7.0.7-58.1 php7-opcache-7.0.7-58.1 php7-opcache-debuginfo-7.0.7-58.1 php7-openssl-7.0.7-58.1 php7-openssl-debuginfo-7.0.7-58.1 php7-pcntl-7.0.7-58.1 php7-pcntl-debuginfo-7.0.7-58.1 php7-pdo-7.0.7-58.1 php7-pdo-debuginfo-7.0.7-58.1 php7-pgsql-7.0.7-58.1 php7-pgsql-debuginfo-7.0.7-58.1 php7-phar-7.0.7-58.1 php7-phar-debuginfo-7.0.7-58.1 php7-posix-7.0.7-58.1 php7-posix-debuginfo-7.0.7-58.1 php7-pspell-7.0.7-58.1 php7-pspell-debuginfo-7.0.7-58.1 php7-readline-7.0.7-58.1 php7-readline-debuginfo-7.0.7-58.1 php7-shmop-7.0.7-58.1 php7-shmop-debuginfo-7.0.7-58.1 php7-snmp-7.0.7-58.1 php7-snmp-debuginfo-7.0.7-58.1 php7-soap-7.0.7-58.1 php7-soap-debuginfo-7.0.7-58.1 php7-sockets-7.0.7-58.1 php7-sockets-debuginfo-7.0.7-58.1 php7-sqlite-7.0.7-58.1 php7-sqlite-debuginfo-7.0.7-58.1 php7-sysvmsg-7.0.7-58.1 php7-sysvmsg-debuginfo-7.0.7-58.1 php7-sysvsem-7.0.7-58.1 php7-sysvsem-debuginfo-7.0.7-58.1 php7-sysvshm-7.0.7-58.1 php7-sysvshm-debuginfo-7.0.7-58.1 php7-tidy-7.0.7-58.1 php7-tidy-debuginfo-7.0.7-58.1 php7-tokenizer-7.0.7-58.1 php7-tokenizer-debuginfo-7.0.7-58.1 php7-wddx-7.0.7-58.1 php7-wddx-debuginfo-7.0.7-58.1 php7-xmlreader-7.0.7-58.1 php7-xmlreader-debuginfo-7.0.7-58.1 php7-xmlrpc-7.0.7-58.1 php7-xmlrpc-debuginfo-7.0.7-58.1 php7-xmlwriter-7.0.7-58.1 php7-xmlwriter-debuginfo-7.0.7-58.1 php7-xsl-7.0.7-58.1 php7-xsl-debuginfo-7.0.7-58.1 php7-zip-7.0.7-58.1 php7-zip-debuginfo-7.0.7-58.1 php7-zlib-7.0.7-58.1 php7-zlib-debuginfo-7.0.7-58.1 - openSUSE Leap 42.3 (noarch): php7-pear-7.0.7-58.1 php7-pear-Archive_Tar-7.0.7-58.1 References: https://www.suse.com/security/cve/CVE-2018-20783.html https://www.suse.com/security/cve/CVE-2019-9020.html https://www.suse.com/security/cve/CVE-2019-9021.html https://www.suse.com/security/cve/CVE-2019-9023.html https://www.suse.com/security/cve/CVE-2019-9024.html https://www.suse.com/security/cve/CVE-2019-9637.html https://www.suse.com/security/cve/CVE-2019-9638.html https://www.suse.com/security/cve/CVE-2019-9639.html https://www.suse.com/security/cve/CVE-2019-9640.html https://www.suse.com/security/cve/CVE-2019-9641.html https://www.suse.com/security/cve/CVE-2019-9675.html https://bugzilla.suse.com/1126711 https://bugzilla.suse.com/1126713 https://bugzilla.suse.com/1126821 https://bugzilla.suse.com/1126823 https://bugzilla.suse.com/1127122 https://bugzilla.suse.com/1128722 https://bugzilla.suse.com/1128883 https://bugzilla.suse.com/1128886 https://bugzilla.suse.com/1128887 https://bugzilla.suse.com/1128889 https://bugzilla.suse.com/1128892 https://bugzilla.suse.com/1129032

1 0

openSUSE-SU-2019:1291-1: important: Security update for libssh2_org
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1291-1 Rating: important References: #1130103 #1133528 Cross-References: CVE-2019-3859 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1291=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libssh2-1-1.8.0-lp150.3.6.1 libssh2-1-debuginfo-1.8.0-lp150.3.6.1 libssh2-devel-1.8.0-lp150.3.6.1 libssh2_org-debugsource-1.8.0-lp150.3.6.1 - openSUSE Leap 15.0 (x86_64): libssh2-1-32bit-1.8.0-lp150.3.6.1 libssh2-1-32bit-debuginfo-1.8.0-lp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-3859.html https://bugzilla.suse.com/1130103 https://bugzilla.suse.com/1133528

1 0

openSUSE-SU-2019:1290-1: important: Security update for libssh2_org
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1290-1 Rating: important References: #1130103 #1133528 Cross-References: CVE-2019-3859 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Incorrect upstream fix for CVE-2019-3859 broke public key authentication [bsc#1133528, bsc#1130103] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1290=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libssh2-1-1.4.3-19.6.1 libssh2-1-debuginfo-1.4.3-19.6.1 libssh2-devel-1.4.3-19.6.1 libssh2_org-debugsource-1.4.3-19.6.1 - openSUSE Leap 42.3 (x86_64): libssh2-1-32bit-1.4.3-19.6.1 libssh2-1-debuginfo-32bit-1.4.3-19.6.1 References: https://www.suse.com/security/cve/CVE-2019-3859.html https://bugzilla.suse.com/1130103 https://bugzilla.suse.com/1133528

1 0

openSUSE-RU-2019:1289-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1289-1 Rating: moderate References: #1108508 #1110869 #1110871 #1119416 #1123185 #1123186 #1126283 #1126318 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for python-kiwi provides the following fixes: - Change the default value for bundler compression. If no compression is configured in the kiwi config file the default was set to False. However this led to big trouble on the OBS side for images which have fixed storage disk sizes configured (for example Azure images which request 30G disk size per instance). The default has changed to be True. - Support alternative EFI and grub modules paths. In SUSE products EFI binaries are historically located in /usr/lib*/efi. In a recent move to package grub2 as noarch, a collision between x86_64 and aarch64 has been identified as both packages place platform-specific files in the same location. To fix this, a new location was devised: /usr/share/efi/$(uname -m). At the same time /usr/lib/grub2 will move to /usr/share/grub2. (fate#326960) - Fix Xen guest detection. Xen setup (e.g in the Amazon Cloud) is only supported for the x86_64 architecture. (bsc#1123186, bsc#1123185) - Fix the location of grub unicode font file. grub2 is expecting the unicode font under the fonts directory in the /boot/grub*/ depending on how the distribution installs grub2. (bsc#1119416) - Add Codec utils for bytes literals decoding. In case of a literal decoding failure it tries to decode the result in utf-8. This is handy in python2 environments where python and the host might be using different charset configurations. In python3 this issue seems to be solved. (bsc#1110871) - Fixed URI handling with token query option. So far only the query format "?credentials=" was supported. In case of "?random_token_data" the returned uri was truncated and also the format check on the query caused a python trace. (bsc#1110869, bsc#1108508) - Fix disk size calculation for VMX. Disk size calculation must take into account the empty volumes that are to be mounted in a directory that does not exist in the root tree otherwise there is KeyError. The result of storate/setup._calculate_volume_mbytes must be a dictionary including all defined volumes. - Fixes an issue where the resize of a disk didn't work if the system is multipath based (bsc#1126283) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1289=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-kiwi-lib-9.17.14-lp150.2.17.1 dracut-kiwi-live-9.17.14-lp150.2.17.1 dracut-kiwi-oem-dump-9.17.14-lp150.2.17.1 dracut-kiwi-oem-repart-9.17.14-lp150.2.17.1 dracut-kiwi-overlay-9.17.14-lp150.2.17.1 kiwi-man-pages-9.17.14-lp150.2.17.1 kiwi-pxeboot-9.17.14-lp150.2.17.1 kiwi-tools-9.17.14-lp150.2.17.1 kiwi-tools-debuginfo-9.17.14-lp150.2.17.1 python-kiwi-debugsource-9.17.14-lp150.2.17.1 python2-kiwi-9.17.14-lp150.2.17.1 python3-kiwi-9.17.14-lp150.2.17.1 References: https://bugzilla.suse.com/1108508 https://bugzilla.suse.com/1110869 https://bugzilla.suse.com/1110871 https://bugzilla.suse.com/1119416 https://bugzilla.suse.com/1123185 https://bugzilla.suse.com/1123186 https://bugzilla.suse.com/1126283 https://bugzilla.suse.com/1126318

1 0

openSUSE-SU-2019:1288-1: important: Security update for libvirt
by opensuse-security＠opensuse.org 29 Apr '19

29 Apr '19

openSUSE Security Update: Security update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1288-1 Rating: important References: #1081516 #1102604 #1104662 #1106420 #1108086 #1108395 #1112182 #1117058 #1118952 #1120813 #1123642 #1124667 #1125665 #1126325 #1127458 #1130129 Cross-References: CVE-2019-3840 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 15 fixes is now available. Description: This update for libvirt provides the following fixes: Security issue fixed: - CVE-2019-3840: Fixed a null pointer dereference vulnerability in virJSONValueObjectHasKey function which could have resulted in a remote denial of service via the guest agent (bsc#1127458). Other issues addressed: - apparmor: reintroduce upstream lxc mount rules (bsc#1130129). - hook: encode incoming XML to UTF-8 before passing to lxml etree from string method (bsc#1123642). - supportconfig: collect rotated logs in /var/log/libvirt/* (bsc#1124667). - libxl: support Xen's max_grant_frames setting with maxGrantFrames attribute on the xenbus controller (bsc#1126325). - conf: added new 'xenbus' controller type - util: skip RDMA detection for non-PCI network devices (bsc#1112182). - qemu: don't use CAP_DAC_OVERRIDE capability if non-root (bsc#1125665). - qemu: fix issues related to restricted permissions on /dev/sev(bsc#1102604). - apparmor: add support for named profiles (bsc#1118952). - libxl: save current memory value after successful balloon (bsc#1120813). - apparmor: Fix ptrace rules. (bsc#1117058) - libxl: Add support for soft reset. (bsc#1081516) - libxl: Fix VM migration on busy hosts. (bsc#1108086) - qemu: Add support for SEV guests. (fate#325817) - util: Don't check for parallel iteration in hash-related functions. (bsc#1106420) - spec: Don't restart libvirt-guests when updating libvirt-client. (bsc#1104662) - Fix virNodeGetSEVInfo API crashing libvirtd on AMD SEV enabled hosts. (bsc#1108395) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1288=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libvirt-4.0.0-lp150.7.10.4 libvirt-admin-4.0.0-lp150.7.10.4 libvirt-admin-debuginfo-4.0.0-lp150.7.10.4 libvirt-client-4.0.0-lp150.7.10.4 libvirt-client-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-4.0.0-lp150.7.10.4 libvirt-daemon-config-network-4.0.0-lp150.7.10.4 libvirt-daemon-config-nwfilter-4.0.0-lp150.7.10.4 libvirt-daemon-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-interface-4.0.0-lp150.7.10.4 libvirt-daemon-driver-interface-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-lxc-4.0.0-lp150.7.10.4 libvirt-daemon-driver-lxc-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-network-4.0.0-lp150.7.10.4 libvirt-daemon-driver-network-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nodedev-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nodedev-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nwfilter-4.0.0-lp150.7.10.4 libvirt-daemon-driver-nwfilter-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-qemu-4.0.0-lp150.7.10.4 libvirt-daemon-driver-qemu-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-secret-4.0.0-lp150.7.10.4 libvirt-daemon-driver-secret-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-core-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-core-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-disk-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-disk-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-iscsi-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-iscsi-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-logical-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-logical-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-mpath-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-mpath-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-scsi-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-scsi-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-uml-4.0.0-lp150.7.10.4 libvirt-daemon-driver-uml-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-vbox-4.0.0-lp150.7.10.4 libvirt-daemon-driver-vbox-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-hooks-4.0.0-lp150.7.10.4 libvirt-daemon-lxc-4.0.0-lp150.7.10.4 libvirt-daemon-qemu-4.0.0-lp150.7.10.4 libvirt-daemon-uml-4.0.0-lp150.7.10.4 libvirt-daemon-vbox-4.0.0-lp150.7.10.4 libvirt-debugsource-4.0.0-lp150.7.10.4 libvirt-devel-4.0.0-lp150.7.10.4 libvirt-doc-4.0.0-lp150.7.10.4 libvirt-libs-4.0.0-lp150.7.10.4 libvirt-libs-debuginfo-4.0.0-lp150.7.10.4 libvirt-lock-sanlock-4.0.0-lp150.7.10.4 libvirt-lock-sanlock-debuginfo-4.0.0-lp150.7.10.4 libvirt-nss-4.0.0-lp150.7.10.4 libvirt-nss-debuginfo-4.0.0-lp150.7.10.4 wireshark-plugin-libvirt-4.0.0-lp150.7.10.4 wireshark-plugin-libvirt-debuginfo-4.0.0-lp150.7.10.4 - openSUSE Leap 15.0 (x86_64): libvirt-client-32bit-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-libxl-4.0.0-lp150.7.10.4 libvirt-daemon-driver-libxl-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-rbd-4.0.0-lp150.7.10.4 libvirt-daemon-driver-storage-rbd-debuginfo-4.0.0-lp150.7.10.4 libvirt-daemon-xen-4.0.0-lp150.7.10.4 libvirt-devel-32bit-4.0.0-lp150.7.10.4 References: https://www.suse.com/security/cve/CVE-2019-3840.html https://bugzilla.suse.com/1081516 https://bugzilla.suse.com/1102604 https://bugzilla.suse.com/1104662 https://bugzilla.suse.com/1106420 https://bugzilla.suse.com/1108086 https://bugzilla.suse.com/1108395 https://bugzilla.suse.com/1112182 https://bugzilla.suse.com/1117058 https://bugzilla.suse.com/1118952 https://bugzilla.suse.com/1120813 https://bugzilla.suse.com/1123642 https://bugzilla.suse.com/1124667 https://bugzilla.suse.com/1125665 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127458 https://bugzilla.suse.com/1130129

1 0

openSUSE-RU-2019:1286-1: moderate: Recommended update for python-python-gnupg
by maintenance＠opensuse.org 28 Apr '19

28 Apr '19

openSUSE Recommended Update: Recommended update for python-python-gnupg ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1286-1 Rating: moderate References: #1130083 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-python-gnupg fixes the following issues: - Switch to pytest runner, which seems to be a way more stable in providing the results. (boo#1130083) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1286=1 Package List: - openSUSE Leap 15.0 (noarch): python2-python-gnupg-0.4.4-lp150.2.10.1 python3-python-gnupg-0.4.4-lp150.2.10.1 References: https://bugzilla.suse.com/1130083

1 0

openSUSE-RU-2019:1287-1: moderate: Recommended update for pugixml
by maintenance＠opensuse.org 28 Apr '19

28 Apr '19

openSUSE Recommended Update: Recommended update for pugixml ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1287-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for pugixml fixes the following issues: - Ship a pkg-config file. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1287=1 Package List: - openSUSE Leap 15.0 (x86_64): libpugixml1-1.9-lp150.2.3.1 libpugixml1-debuginfo-1.9-lp150.2.3.1 pugixml-debugsource-1.9-lp150.2.3.1 pugixml-devel-1.9-lp150.2.3.1 References:

1 0

openSUSE-RU-2019:1285-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 27 Apr '19

27 Apr '19

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1285-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: - Fixed a problem with the apparmor dropin to be compatible with LXC 3.1.0. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1285=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): liblxc-devel-3.1.0-bp150.5.10.1 liblxc1-3.1.0-bp150.5.10.1 lxc-3.1.0-bp150.5.10.1 pam_cgfs-3.1.0-bp150.5.10.1 - openSUSE Backports SLE-15 (noarch): lxc-bash-completion-3.1.0-bp150.5.10.1 References:

1 0

openSUSE-SU-2019:1284-1: moderate: Security update for ceph
by opensuse-security＠opensuse.org 27 Apr '19

27 Apr '19

openSUSE Security Update: Security update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1284-1 Rating: moderate References: #1084645 #1086613 #1096748 #1099162 #1101262 #1111177 #1114567 #1114710 Cross-References: CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-14662 CVE-2018-16846 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has three fixes is now available. Description: This update for ceph version 13.2.4 fixes the following issues: Security issues fixed: - CVE-2018-14662: Fixed an issue with LUKS 'config-key' safety (bsc#1111177) - CVE-2018-10861: Fixed an authorization bypass on OSD pool ops in ceph-mon (bsc#1099162) - CVE-2018-1128: Fixed signature check bypass in cephx (bsc#1096748) - CVE-2018-1129: Fixed replay attack in cephx protocol (bsc#1096748) - CVE-2018-16846: Enforced bounds on max-keys/max-uploads/max-parts in rgw (bsc#1114710) Non-security issues fixed: - ceph-volume Python 3 fixes (bsc#1114567) - Fixed python3 module loading (bsc#1086613) - Fixed an issue where ceph build fails (bsc#1084645) - ceph's SPDK builds with march=native (bsc#1101262) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1284=1 Package List: - openSUSE Leap 15.0 (x86_64): ceph-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-base-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-base-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-common-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-common-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-fuse-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mds-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mds-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mgr-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mgr-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mon-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-mon-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-osd-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-osd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-radosgw-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-radosgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-resource-agents-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 ceph-test-debugsource-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs-devel-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs2-13.2.4.125+gad802694f5-lp150.2.3.1 libcephfs2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librados-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librados-devel-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librados2-13.2.4.125+gad802694f5-lp150.2.3.1 librados2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper-devel-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper1-13.2.4.125+gad802694f5-lp150.2.3.1 libradosstriper1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librbd-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librbd1-13.2.4.125+gad802694f5-lp150.2.3.1 librbd1-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 librgw-devel-13.2.4.125+gad802694f5-lp150.2.3.1 librgw2-13.2.4.125+gad802694f5-lp150.2.3.1 librgw2-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-cephfs-13.2.4.125+gad802694f5-lp150.2.3.1 python3-cephfs-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rados-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rados-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rbd-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rgw-13.2.4.125+gad802694f5-lp150.2.3.1 python3-rgw-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rados-objclass-devel-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-fuse-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-fuse-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-mirror-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-mirror-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-nbd-13.2.4.125+gad802694f5-lp150.2.3.1 rbd-nbd-debuginfo-13.2.4.125+gad802694f5-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10861.html https://www.suse.com/security/cve/CVE-2018-1128.html https://www.suse.com/security/cve/CVE-2018-1129.html https://www.suse.com/security/cve/CVE-2018-14662.html https://www.suse.com/security/cve/CVE-2018-16846.html https://bugzilla.suse.com/1084645 https://bugzilla.suse.com/1086613 https://bugzilla.suse.com/1096748 https://bugzilla.suse.com/1099162 https://bugzilla.suse.com/1101262 https://bugzilla.suse.com/1111177 https://bugzilla.suse.com/1114567 https://bugzilla.suse.com/1114710

1 0

openSUSE-SU-2019:1283-1: Security update for xerces-c
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for xerces-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1283-1 Rating: low References: #1083630 Cross-References: CVE-2017-12627 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xerces-c fixes the following issue: - CVE-2017-12627: Processing of external DTD paths could have resulted in a null pointer dereference under certain conditions (bsc#1083630) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1283=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libxerces-c-3_1-3.1.4-lp150.2.3.1 libxerces-c-3_1-debuginfo-3.1.4-lp150.2.3.1 libxerces-c-devel-3.1.4-lp150.2.3.1 xerces-c-3.1.4-lp150.2.3.1 xerces-c-debuginfo-3.1.4-lp150.2.3.1 xerces-c-debugsource-3.1.4-lp150.2.3.1 xerces-c-doc-3.1.4-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libxerces-c-3_1-32bit-3.1.4-lp150.2.3.1 libxerces-c-3_1-32bit-debuginfo-3.1.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-12627.html https://bugzilla.suse.com/1083630

1 0

openSUSE-RU-2019:1280-1: moderate: Recommended update for lxc
by maintenance＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Recommended Update: Recommended update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1280-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for lxc fixes the following issues: - Fixed a problem with the apparmor dropin to be compatible with LXC 3.1.0. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1280=1 Package List: - openSUSE Leap 15.0 (noarch): lxc-bash-completion-3.1.0-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): liblxc-devel-3.1.0-lp150.2.13.1 liblxc1-3.1.0-lp150.2.13.1 liblxc1-debuginfo-3.1.0-lp150.2.13.1 lxc-3.1.0-lp150.2.13.1 lxc-debuginfo-3.1.0-lp150.2.13.1 lxc-debugsource-3.1.0-lp150.2.13.1 pam_cgfs-3.1.0-lp150.2.13.1 pam_cgfs-debuginfo-3.1.0-lp150.2.13.1 References:

1 0

openSUSE-SU-2019:1281-1: important: Security update for wget
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1281-1 Rating: important References: #1131493 Cross-References: CVE-2019-5953 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1281=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): wget-1.14-18.1 wget-debuginfo-1.14-18.1 wget-debugsource-1.14-18.1 References: https://www.suse.com/security/cve/CVE-2019-5953.html https://bugzilla.suse.com/1131493

1 0

openSUSE-SU-2019:1282-1: important: Security update for python3
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1282-1 Rating: important References: #1129346 Cross-References: CVE-2019-9636 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python3 fixes the following issues: Security issue fixed: - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1282=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python3-3.6.5-lp150.2.10.1 python3-curses-3.6.5-lp150.2.10.1 python3-curses-debuginfo-3.6.5-lp150.2.10.1 python3-dbm-3.6.5-lp150.2.10.1 python3-dbm-debuginfo-3.6.5-lp150.2.10.1 python3-debuginfo-3.6.5-lp150.2.10.1 python3-debugsource-3.6.5-lp150.2.10.1 python3-tk-3.6.5-lp150.2.10.1 python3-tk-debuginfo-3.6.5-lp150.2.10.1 - openSUSE Leap 15.0 (x86_64): python3-32bit-3.6.5-lp150.2.10.1 python3-32bit-debuginfo-3.6.5-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-9636.html https://bugzilla.suse.com/1129346

1 0

openSUSE-RU-2019:1278-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1278-1 Rating: moderate References: #1122455 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for transactional-update to version 2.14.1 fixes the following issues: - Improve non-root fs changes checker based on feedback - Disable snapper's zypper plugin during transactional-update run - Allow parallel installation with snapper's zypper plugin (useful on read-write systems). - Warn user if contents of /var have been changed during update - Swapped position of upperdir and lowerdir in fstab for better readability - Add hooks for telemetrics - Fix a serious data loss problem (deleting all files in /etc overlays) in case /var/lib/overlay/etc is not part of any snapshot any more. - Avoid error message in case a system has no /etc/fstab.sys - Implements support for needs-restart (Fate#326451) - Adds easy rollback to last known working snapshot by using "last" as the snapshot number - Migrate /etc/fstab.sys entires to /etc/fstab for systemd being able to create mount units; this will prevent errors on unmount - Remove implicit --no-allow-vendor-change - this option can be configured in zypper's configuration file now - Add support for mounting the /etc overlay file system as a systemd unit in /etc/fstab on a read-only system (replacing /etc/fstab.sys in the long run) - Only remove /etc overlays on read-only root file systems (boo#1122455) - Disable "Persistent" flag in systemd timer unit to prevent updates during or immediately after the boot phase - Don't set global zypper options during migration - this is not supported by the migration plugin - Fix error handling when interrupting while rsync is running - Filter out security.selinux attributes during rsync Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1278=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): transactional-update-2.14.1-lp150.2.13.1 transactional-update-debuginfo-2.14.1-lp150.2.13.1 transactional-update-debugsource-2.14.1-lp150.2.13.1 - openSUSE Leap 15.0 (noarch): transactional-update-zypp-config-2.14.1-lp150.2.13.1 References: https://bugzilla.suse.com/1122455

1 0

openSUSE-RU-2019:1279-1: moderate: Recommended update for transactional-update
by maintenance＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Recommended Update: Recommended update for transactional-update ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1279-1 Rating: moderate References: #1122455 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for transactional-update to version 2.14.1 fixes the following issues: - Improve non-root fs changes checker based on feedback - Disable snapper's zypper plugin during transactional-update run - Allow parallel installation with snapper's zypper plugin (useful on read-write systems). - Warn user if contents of /var have been changed during update - Swapped position of upperdir and lowerdir in fstab for better readability - Add hooks for telemetrics - Fix a serious data loss problem (deleting all files in /etc overlays) in case /var/lib/overlay/etc is not part of any snapshot any more. - Avoid error message in case a system has no /etc/fstab.sys - Implements support for needs-restart (Fate#326451) - Adds easy rollback to last known working snapshot by using "last" as the snapshot number - Migrate /etc/fstab.sys entires to /etc/fstab for systemd being able to create mount units; this will prevent errors on unmount - Remove implicit --no-allow-vendor-change - this option can be configured in zypper's configuration file now - Add support for mounting the /etc overlay file system as a systemd unit in /etc/fstab on a read-only system (replacing /etc/fstab.sys in the long run) - Only remove /etc overlays on read-only root file systems (boo#1122455) - Disable "Persistent" flag in systemd timer unit to prevent updates during or immediately after the boot phase - Don't set global zypper options during migration - this is not supported by the migration plugin - Fix error handling when interrupting while rsync is running - Filter out security.selinux attributes during rsync This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1279=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): transactional-update-2.14.1-bp150.2.13.1 - openSUSE Backports SLE-15 (noarch): transactional-update-zypp-config-2.14.1-bp150.2.13.1 References: https://bugzilla.suse.com/1122455

1 0

openSUSE-SU-2019:1277-1: moderate: Security update for kauth
by opensuse-security＠opensuse.org 26 Apr '19

26 Apr '19

openSUSE Security Update: Security update for kauth ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1277-1 Rating: moderate References: #1124863 Cross-References: CVE-2019-7443 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kauth fixes the following issues: Security issue fixed: - CVE-2019-7443: Fixed an insecure handling of arguments in helpers by removing the support of passing gui variants (bsc#1124863). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1277=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): kauth-debugsource-5.45.0-bp150.8.2 kauth-devel-5.45.0-bp150.8.2 libKF5Auth5-5.45.0-bp150.8.2 libKF5Auth5-debuginfo-5.45.0-bp150.8.2 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x): libpolkit-qt5-1-1-0.112.0-bp150.3.6.1 libpolkit-qt5-1-devel-0.112.0-bp150.3.6.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kauth-devel-64bit-5.45.0-bp150.8.2 libKF5Auth5-64bit-5.45.0-bp150.8.2 libKF5Auth5-64bit-debuginfo-5.45.0-bp150.8.2 libpolkit-qt5-1-1-64bit-0.112.0-bp150.3.6.1 libpolkit-qt5-1-devel-64bit-0.112.0-bp150.3.6.1 - openSUSE Backports SLE-15 (noarch): libKF5Auth5-lang-5.45.0-bp150.8.2 - openSUSE Backports SLE-15 (x86_64): libpolkit-qt5-1-1-0.112.0-bp150.3.6.2 libpolkit-qt5-1-devel-0.112.0-bp150.3.6.2 References: https://www.suse.com/security/cve/CVE-2019-7443.html https://bugzilla.suse.com/1124863

1 0

openSUSE-SU-2019:1276-1: moderate: Security update for xmltooling
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1276-1 Rating: moderate References: #1129537 Cross-References: CVE-2019-9628 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmltooling fixes the following issue: Security issue fixed: - CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling (bsc#1129537). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1276=1 Package List: - openSUSE Leap 42.3 (x86_64): libxmltooling-devel-1.5.6-12.1 libxmltooling6-1.5.6-12.1 libxmltooling6-debuginfo-1.5.6-12.1 xmltooling-debugsource-1.5.6-12.1 xmltooling-schemas-1.5.6-12.1 References: https://www.suse.com/security/cve/CVE-2019-9628.html https://bugzilla.suse.com/1129537

1 0

openSUSE-SU-2019:1274-1: important: Security update for qemu
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1274-1 Rating: important References: #1118900 #1125721 #1126455 #1129622 #1130675 #1131955 Cross-References: CVE-2018-20815 CVE-2019-3812 CVE-2019-8934 CVE-2019-9824 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for qemu fixes the following issues: Security issues fixed: - CVE-2019-9824: Fixed information leak in slirp (bsc#1129622). - CVE-2019-8934: Added method to specify whether or not to expose certain ppc64 hostinformation (bsc#1126455). - CVE-2019-3812: Fixed Out-of-bounds memory access and information leak in virtual monitor interface (bsc#1125721). - CVE-2018-20815: Fixed a denial of service possibility in device tree processing (bsc#1130675). Non-security issue fixed: - Backported Skylake-Server vcpu model support from qemu v2.11 (FATE#327261 bsc#1131955). - Added ability to set virtqueue size using virtqueue_size parameter (FATE#327255 bsc#1118900). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1274=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): qemu-linux-user-2.9.1-59.1 qemu-linux-user-debuginfo-2.9.1-59.1 qemu-linux-user-debugsource-2.9.1-59.1 - openSUSE Leap 42.3 (noarch): qemu-ipxe-1.0.0+-59.1 qemu-seabios-1.10.2-59.1 qemu-sgabios-8-59.1 qemu-vgabios-1.10.2-59.1 - openSUSE Leap 42.3 (x86_64): qemu-2.9.1-59.1 qemu-arm-2.9.1-59.1 qemu-arm-debuginfo-2.9.1-59.1 qemu-block-curl-2.9.1-59.1 qemu-block-curl-debuginfo-2.9.1-59.1 qemu-block-dmg-2.9.1-59.1 qemu-block-dmg-debuginfo-2.9.1-59.1 qemu-block-iscsi-2.9.1-59.1 qemu-block-iscsi-debuginfo-2.9.1-59.1 qemu-block-rbd-2.9.1-59.1 qemu-block-rbd-debuginfo-2.9.1-59.1 qemu-block-ssh-2.9.1-59.1 qemu-block-ssh-debuginfo-2.9.1-59.1 qemu-debugsource-2.9.1-59.1 qemu-extra-2.9.1-59.1 qemu-extra-debuginfo-2.9.1-59.1 qemu-guest-agent-2.9.1-59.1 qemu-guest-agent-debuginfo-2.9.1-59.1 qemu-ksm-2.9.1-59.1 qemu-kvm-2.9.1-59.1 qemu-lang-2.9.1-59.1 qemu-ppc-2.9.1-59.1 qemu-ppc-debuginfo-2.9.1-59.1 qemu-s390-2.9.1-59.1 qemu-s390-debuginfo-2.9.1-59.1 qemu-testsuite-2.9.1-59.2 qemu-tools-2.9.1-59.1 qemu-tools-debuginfo-2.9.1-59.1 qemu-x86-2.9.1-59.1 qemu-x86-debuginfo-2.9.1-59.1 References: https://www.suse.com/security/cve/CVE-2018-20815.html https://www.suse.com/security/cve/CVE-2019-3812.html https://www.suse.com/security/cve/CVE-2019-8934.html https://www.suse.com/security/cve/CVE-2019-9824.html https://bugzilla.suse.com/1118900 https://bugzilla.suse.com/1125721 https://bugzilla.suse.com/1126455 https://bugzilla.suse.com/1129622 https://bugzilla.suse.com/1130675 https://bugzilla.suse.com/1131955

1 0

openSUSE-SU-2019:1272-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1272-1 Rating: moderate References: #1132053 #1132054 #1132055 #1132058 #1132060 #1132061 Cross-References: CVE-2019-11005 CVE-2019-11006 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-11010 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for GraphicsMagick fixes the following issues: - CVE-2019-11005: Fixed a stack-based buffer overflow in SVGStartElement of coders/svg.c that allowed attackers to cause DOS or an unspecified impact (boo#1132058) - CVE-2019-11006: Fixed a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c that allowed attackers to cause DOS or information disclosure (boo#1132061) - CVE-2019-11010: Fixed a memory leak in ReadMPCImage of coders/mpc.c that which allowed attackers to cause DOS via a crafted image file (boo#1132055) - CVE-2019-11007: Fixed a heap-based buffer over-read in the ReadMNGImage function of coders/png.c that which allowed attackers to cause a denial of service or information disclosure (boo#1132060) - CVE-2019-11008: Fixed a heap-based buffer overflow in the function WriteXWDImage of coders/xwd.c that which allowed remote attackers to cause DOS or other unspecified impact (boo#1132054) - CVE-2019-11009: Fixed a heap-based buffer over-read in the function ReadXWDImage of coders/xwd.c that which allowed attackers to cause DOS or information disclosure (boo#1132053) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1272=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1272=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-132.1 GraphicsMagick-debuginfo-1.3.25-132.1 GraphicsMagick-debugsource-1.3.25-132.1 GraphicsMagick-devel-1.3.25-132.1 libGraphicsMagick++-Q16-12-1.3.25-132.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-132.1 libGraphicsMagick++-devel-1.3.25-132.1 libGraphicsMagick-Q16-3-1.3.25-132.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-132.1 libGraphicsMagick3-config-1.3.25-132.1 libGraphicsMagickWand-Q16-2-1.3.25-132.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-132.1 perl-GraphicsMagick-1.3.25-132.1 perl-GraphicsMagick-debuginfo-1.3.25-132.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.25.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.25.1 GraphicsMagick-debugsource-1.3.29-lp150.3.25.1 GraphicsMagick-devel-1.3.29-lp150.3.25.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.25.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.25.1 libGraphicsMagick++-devel-1.3.29-lp150.3.25.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.25.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.25.1 libGraphicsMagick3-config-1.3.29-lp150.3.25.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.25.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.25.1 perl-GraphicsMagick-1.3.29-lp150.3.25.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.25.1 References: https://www.suse.com/security/cve/CVE-2019-11005.html https://www.suse.com/security/cve/CVE-2019-11006.html https://www.suse.com/security/cve/CVE-2019-11007.html https://www.suse.com/security/cve/CVE-2019-11008.html https://www.suse.com/security/cve/CVE-2019-11009.html https://www.suse.com/security/cve/CVE-2019-11010.html https://bugzilla.suse.com/1132053 https://bugzilla.suse.com/1132054 https://bugzilla.suse.com/1132055 https://bugzilla.suse.com/1132058 https://bugzilla.suse.com/1132060 https://bugzilla.suse.com/1132061

1 0

openSUSE-SU-2019:1273-1: important: Security update for python
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1273-1 Rating: important References: #1129346 #1130847 Cross-References: CVE-2019-9636 CVE-2019-9948 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python fixes the following issues: Security issues fixed: - CVE-2019-9948: Fixed a 'file:' blacklist bypass in URIs by using the 'local-file:' scheme instead (bsc#1130847). - CVE-2019-9636: Fixed an information disclosure because of incorrect handling of Unicode encoding during NFKC normalization (bsc#1129346). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1273=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.10.1 python-curses-2.7.14-lp150.6.10.1 python-curses-debuginfo-2.7.14-lp150.6.10.1 python-debuginfo-2.7.14-lp150.6.10.1 python-debugsource-2.7.14-lp150.6.10.1 python-demo-2.7.14-lp150.6.10.1 python-gdbm-2.7.14-lp150.6.10.1 python-gdbm-debuginfo-2.7.14-lp150.6.10.1 python-idle-2.7.14-lp150.6.10.1 python-tk-2.7.14-lp150.6.10.1 python-tk-debuginfo-2.7.14-lp150.6.10.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.10.1 python-32bit-debuginfo-2.7.14-lp150.6.10.1 References: https://www.suse.com/security/cve/CVE-2019-9636.html https://www.suse.com/security/cve/CVE-2019-9948.html https://bugzilla.suse.com/1129346 https://bugzilla.suse.com/1130847

1 0

openSUSE-SU-2019:1275-1: important: Security update for lxc, lxcfs
by opensuse-security＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1275-1 Rating: important References: #1122185 #1131762 #988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1275=1 Package List: - openSUSE Leap 15.0 (x86_64): liblxc-devel-3.1.0-lp150.2.10.1 liblxc1-3.1.0-lp150.2.10.1 liblxc1-debuginfo-3.1.0-lp150.2.10.1 lxc-3.1.0-lp150.2.10.1 lxc-debuginfo-3.1.0-lp150.2.10.1 lxc-debugsource-3.1.0-lp150.2.10.1 lxcfs-3.0.3-lp150.2.3.1 lxcfs-debuginfo-3.0.3-lp150.2.3.1 lxcfs-debugsource-3.0.3-lp150.2.3.1 pam_cgfs-3.1.0-lp150.2.10.1 pam_cgfs-debuginfo-3.1.0-lp150.2.10.1 - openSUSE Leap 15.0 (noarch): lxc-bash-completion-3.1.0-lp150.2.10.1 lxcfs-hooks-lxc-3.0.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348

1 0

openSUSE-RU-2019:1269-1: moderate: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1269-1 Rating: moderate References: #1128323 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issues: The Python RPM macros were updated to version 20190408.32abece, fixing bugs (bsc#1128323) * Add missing $ expansion on the pytest call * Rewrite pytest and pytest_arch into Lua macros with multiple arguments. * We should preserve existing PYTHONPATH. * Add --ignore to pytest calls to ignore build directories. * Actually make pytest into function to capture arguments as well * Add pytest definitions. * Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. * Fix an issue with epoch printing having too many \ * add epoch while printing "Provides:" This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1269=1 Package List: - openSUSE Leap 15.0 (noarch): python-rpm-macros-20190408.32abece-lp150.2.3.1 References: https://bugzilla.suse.com/1128323

1 0

openSUSE-RU-2019:1271-1: moderate: Recommended update for sg3_utils
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for sg3_utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1271-1 Rating: moderate References: #1069384 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sg3_utils fixes the following issues: - rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1271=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsgutils-devel-1.43+43.158502d-18.1 libsgutils2-2-1.43+43.158502d-18.1 libsgutils2-2-debuginfo-1.43+43.158502d-18.1 sg3_utils-1.43+43.158502d-18.1 sg3_utils-debuginfo-1.43+43.158502d-18.1 sg3_utils-debugsource-1.43+43.158502d-18.1 References: https://bugzilla.suse.com/1069384

1 0

openSUSE-RU-2019:1266-1: moderate: Recommended update for hplip
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for hplip ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1266-1 Rating: moderate References: #1094141 #1096755 #1100511 #1112331 #1131613 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for hplip fixes the following issues: - Bugfix: hang during GNOME session logout. (bsc#1112331) - Removed Fix-scanning-with-python-pillow-4.2.0.patch as resolved upstream. (bsc#1096755) - Added support for 104 new printers/scanners/devices. See the changelog for the detailed list. - Added support for the several other distributions: - Require python3-Pillow for hp-scan to work. (bsc#1100511) - Bugfix: scanning with python-pillow 4.2.0. (bsc#1096755) - Bugfix: default behavior of DJ9xxVIP device must not be changed. - Avoid segfault in hplip/hpijs during PDF printing. (bsc#1094141) - File '/usr/lib/udev/rules.d/56-hpmud.rules' is no longer marked as config file - hplip: hp-scan is non-functional (bsc#1131613) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1266=1 Package List: - openSUSE Leap 15.0 (x86_64): hplip-3.18.6-lp150.4.3.1 hplip-debuginfo-3.18.6-lp150.4.3.1 hplip-debugsource-3.18.6-lp150.4.3.1 hplip-devel-3.18.6-lp150.4.3.1 hplip-hpijs-3.18.6-lp150.4.3.1 hplip-hpijs-debuginfo-3.18.6-lp150.4.3.1 hplip-sane-3.18.6-lp150.4.3.1 hplip-sane-debuginfo-3.18.6-lp150.4.3.1 References: https://bugzilla.suse.com/1094141 https://bugzilla.suse.com/1096755 https://bugzilla.suse.com/1100511 https://bugzilla.suse.com/1112331 https://bugzilla.suse.com/1131613

1 0

openSUSE-RU-2019:1267-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1267-1 Rating: moderate References: #1024998 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for brings keepassxc to version 2.4.1: * Several bugfixes and minor functional impovements * disable update check Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1267=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1267=1 Package List: - openSUSE Leap 15.0 (x86_64): keepassxc-2.4.1-lp150.2.6.1 keepassxc-debuginfo-2.4.1-lp150.2.6.1 keepassxc-debugsource-2.4.1-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): keepassxc-lang-2.4.1-lp150.2.6.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): keepassxc-2.4.1-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): keepassxc-lang-2.4.1-bp150.2.6.1 References: https://bugzilla.suse.com/1024998

1 0

openSUSE-RU-2019:1268-1: important: Recommended update for btrfsprogs
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1268-1 Rating: important References: #1122539 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for btrfsprogs provides the following: - Advise user of fs recovery options when we fail to mount (bsc#1122539) - Use correct path for dracut-fsck-help.txt in module-setup.sh (bsc#1122539) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1268=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): btrfsprogs-4.15-lp150.2.3.1 btrfsprogs-debuginfo-4.15-lp150.2.3.1 btrfsprogs-debugsource-4.15-lp150.2.3.1 libbtrfs-devel-4.15-lp150.2.3.1 libbtrfs0-4.15-lp150.2.3.1 libbtrfs0-debuginfo-4.15-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): btrfsprogs-udev-rules-4.15-lp150.2.3.1 References: https://bugzilla.suse.com/1122539

1 0

openSUSE-RU-2019:1270-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 25 Apr '19

25 Apr '19

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1270-1 Rating: moderate References: #1054986 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for virt-manager fixes the following issues: - Bugfix: SUSE Linux Enterprise 15 SP1 was not detected correctly (bsc#1054986) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1270=1 Package List: - openSUSE Leap 15.0 (noarch): virt-install-1.5.1-lp150.6.10.1 virt-manager-1.5.1-lp150.6.10.1 virt-manager-common-1.5.1-lp150.6.10.1 References: https://bugzilla.suse.com/1054986

1 0

openSUSE-SU-2019:1264-1: moderate: Security update for slurm
by opensuse-security＠opensuse.org 24 Apr '19

24 Apr '19

openSUSE Security Update: Security update for slurm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1264-1 Rating: moderate References: #1123304 Cross-References: CVE-2019-6438 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for slurm to version 17.11.13 fixes the following issues: Security issue fixed: - CVE-2019-6438: Fixed a heap overflow on 32-bit systems in xmalloc (bsc#1123304). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1264=1 Package List: - openSUSE Leap 15.0 (x86_64): libpmi0-17.11.13-lp150.5.20.1 libpmi0-debuginfo-17.11.13-lp150.5.20.1 libslurm32-17.11.13-lp150.5.20.1 libslurm32-debuginfo-17.11.13-lp150.5.20.1 perl-slurm-17.11.13-lp150.5.20.1 perl-slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-17.11.13-lp150.5.20.1 slurm-auth-none-17.11.13-lp150.5.20.1 slurm-auth-none-debuginfo-17.11.13-lp150.5.20.1 slurm-config-17.11.13-lp150.5.20.1 slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-debugsource-17.11.13-lp150.5.20.1 slurm-devel-17.11.13-lp150.5.20.1 slurm-doc-17.11.13-lp150.5.20.1 slurm-lua-17.11.13-lp150.5.20.1 slurm-lua-debuginfo-17.11.13-lp150.5.20.1 slurm-munge-17.11.13-lp150.5.20.1 slurm-munge-debuginfo-17.11.13-lp150.5.20.1 slurm-node-17.11.13-lp150.5.20.1 slurm-node-debuginfo-17.11.13-lp150.5.20.1 slurm-openlava-17.11.13-lp150.5.20.1 slurm-pam_slurm-17.11.13-lp150.5.20.1 slurm-pam_slurm-debuginfo-17.11.13-lp150.5.20.1 slurm-plugins-17.11.13-lp150.5.20.1 slurm-plugins-debuginfo-17.11.13-lp150.5.20.1 slurm-seff-17.11.13-lp150.5.20.1 slurm-sjstat-17.11.13-lp150.5.20.1 slurm-slurmdbd-17.11.13-lp150.5.20.1 slurm-slurmdbd-debuginfo-17.11.13-lp150.5.20.1 slurm-sql-17.11.13-lp150.5.20.1 slurm-sql-debuginfo-17.11.13-lp150.5.20.1 slurm-sview-17.11.13-lp150.5.20.1 slurm-sview-debuginfo-17.11.13-lp150.5.20.1 slurm-torque-17.11.13-lp150.5.20.1 slurm-torque-debuginfo-17.11.13-lp150.5.20.1 References: https://www.suse.com/security/cve/CVE-2019-6438.html https://bugzilla.suse.com/1123304

1 0

openSUSE-SU-2019:1265-1: Security update for openexr
by opensuse-security＠opensuse.org 24 Apr '19

24 Apr '19

openSUSE Security Update: Security update for openexr ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1265-1 Rating: low References: #1113455 Cross-References: CVE-2018-18444 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for openexr fixes the following issues: Security issue fixed: - CVE-2018-18444: Fixed Out-of-bounds write in makeMultiView.cpp (bsc#1113455). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1265=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libIlmImf-2_2-23-2.2.1-lp150.2.3.1 libIlmImf-2_2-23-debuginfo-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-debuginfo-2.2.1-lp150.2.3.1 openexr-2.2.1-lp150.2.3.1 openexr-debuginfo-2.2.1-lp150.2.3.1 openexr-debugsource-2.2.1-lp150.2.3.1 openexr-devel-2.2.1-lp150.2.3.1 openexr-doc-2.2.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libIlmImf-2_2-23-32bit-2.2.1-lp150.2.3.1 libIlmImf-2_2-23-32bit-debuginfo-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-32bit-2.2.1-lp150.2.3.1 libIlmImfUtil-2_2-23-32bit-debuginfo-2.2.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-18444.html https://bugzilla.suse.com/1113455

1 0

openSUSE-SU-2019:1261-1: moderate: Security update for SDL2
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1261-1 Rating: moderate References: #1124799 #1124800 #1124802 #1124803 #1124805 #1124806 #1124824 #1124825 #1124826 #1124827 #1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for SDL2 fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1261=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): SDL2-debugsource-2.0.8-lp150.2.3.1 libSDL2-2_0-0-2.0.8-lp150.2.3.1 libSDL2-2_0-0-debuginfo-2.0.8-lp150.2.3.1 libSDL2-devel-2.0.8-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libSDL2-2_0-0-32bit-2.0.8-lp150.2.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-lp150.2.3.1 libSDL2-devel-32bit-2.0.8-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-7572.html https://www.suse.com/security/cve/CVE-2019-7573.html https://www.suse.com/security/cve/CVE-2019-7574.html https://www.suse.com/security/cve/CVE-2019-7575.html https://www.suse.com/security/cve/CVE-2019-7576.html https://www.suse.com/security/cve/CVE-2019-7577.html https://www.suse.com/security/cve/CVE-2019-7578.html https://www.suse.com/security/cve/CVE-2019-7635.html https://www.suse.com/security/cve/CVE-2019-7636.html https://www.suse.com/security/cve/CVE-2019-7637.html https://www.suse.com/security/cve/CVE-2019-7638.html https://bugzilla.suse.com/1124799 https://bugzilla.suse.com/1124800 https://bugzilla.suse.com/1124802 https://bugzilla.suse.com/1124803 https://bugzilla.suse.com/1124805 https://bugzilla.suse.com/1124806 https://bugzilla.suse.com/1124824 https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1124826 https://bugzilla.suse.com/1124827 https://bugzilla.suse.com/1125099

1 0

openSUSE-SU-2019:1260-1: Security update for audiofile
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for audiofile ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1260-1 Rating: low References: #1100523 Cross-References: CVE-2018-13440 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for audiofile fixes the following issues: Security issue fixed: - CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1260=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): audiofile-0.3.6-lp150.7.1 audiofile-debuginfo-0.3.6-lp150.7.1 audiofile-debugsource-0.3.6-lp150.7.1 audiofile-devel-0.3.6-lp150.7.1 audiofile-doc-0.3.6-lp150.7.1 libaudiofile1-0.3.6-lp150.7.1 libaudiofile1-debuginfo-0.3.6-lp150.7.1 - openSUSE Leap 15.0 (x86_64): audiofile-devel-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-0.3.6-lp150.7.1 libaudiofile1-32bit-debuginfo-0.3.6-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-13440.html https://bugzilla.suse.com/1100523

1 0

openSUSE-SU-2019:1259-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1259-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1259=1 Package List: - openSUSE Leap 15.0 (x86_64): libqt5-qtvirtualkeyboard-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debuginfo-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-debugsource-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-lp150.2.3.1 libqt5-qtvirtualkeyboard-examples-debuginfo-5.9.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593

1 0

openSUSE-SU-2019:1263-1: moderate: Security update for libqt5-qtvirtualkeyboard
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for libqt5-qtvirtualkeyboard ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1263-1 Rating: moderate References: #1118593 Cross-References: CVE-2018-19865 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtvirtualkeyboard fixes the following issues: Security issue fixed: - CVE-2018-19865: Fixed an issue with verbose keypress logging (boo#1118593). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1263=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libqt5-qtvirtualkeyboard-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-devel-5.9.4-bp150.3.3.1 libqt5-qtvirtualkeyboard-examples-5.9.4-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19865.html https://bugzilla.suse.com/1118593

1 0

openSUSE-RU-2019:1262-1: moderate: Recommended update for datovka
by maintenance＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Recommended Update: Recommended update for datovka ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1262-1 Rating: moderate References: #1104620 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for datovka fixes the following issues: - Update to 4.13.0 (boo#1104620): * Account renaming now possible * Special format downloading now alloved to "spisova sluzba" This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1262=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): datovka-4.13.0-bp150.15.1 References: https://bugzilla.suse.com/1104620

1 0

openSUSE-SU-2019:1258-1: important: Security update for apache2
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1258-1 Rating: important References: #1131233 #1131237 #1131239 #1131241 #1131245 Cross-References: CVE-2019-0196 CVE-2019-0197 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239] * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the server could have abused this issue to potentially gain super user privileges. [bsc#1131233] * CVE-2019-0197: When HTTP/2 support was enabled in the Apache server for a 'http' host or H2Upgrade was enabled for h2 on a 'https' host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. This issue could have been abused to mount a denial-of-service attack. Servers that never enabled the h2 protocol or that only enabled it for https: and did not configure the "H2Upgrade on" are unaffected. [bsc#1131245] * CVE-2019-0196: Through specially crafted network input the Apache's http/2 request handler could be lead to access previously freed memory while determining the method of a request. This resulted in the request being misclassified and thus being processed incorrectly. [bsc#1131237] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1258=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-49.1 apache2-debuginfo-2.4.23-49.1 apache2-debugsource-2.4.23-49.1 apache2-devel-2.4.23-49.1 apache2-event-2.4.23-49.1 apache2-event-debuginfo-2.4.23-49.1 apache2-example-pages-2.4.23-49.1 apache2-prefork-2.4.23-49.1 apache2-prefork-debuginfo-2.4.23-49.1 apache2-utils-2.4.23-49.1 apache2-utils-debuginfo-2.4.23-49.1 apache2-worker-2.4.23-49.1 apache2-worker-debuginfo-2.4.23-49.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-49.1 References: https://www.suse.com/security/cve/CVE-2019-0196.html https://www.suse.com/security/cve/CVE-2019-0197.html https://www.suse.com/security/cve/CVE-2019-0211.html https://www.suse.com/security/cve/CVE-2019-0217.html https://www.suse.com/security/cve/CVE-2019-0220.html https://bugzilla.suse.com/1131233 https://bugzilla.suse.com/1131237 https://bugzilla.suse.com/1131239 https://bugzilla.suse.com/1131241 https://bugzilla.suse.com/1131245

1 0

openSUSE-RU-2019:1257-1: moderate: Recommended update for deepin-music-player
by maintenance＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Recommended Update: Recommended update for deepin-music-player ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1257-1 Rating: moderate References: #1131464 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for deepin-music-player fixes the following issues: - Make lyrics work (boo#1131464). * Add libnetease-meta-search.so in filelist, it is not a developement file This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1257=1 Package List: - openSUSE Backports SLE-15 (x86_64): deepin-music-libnetease-meta-search-3.1.7.2-bp150.2.3.1 deepin-music-player-3.1.7.2-bp150.2.3.1 libdbusextended-qt5-1-3.1.7.2-bp150.2.3.1 libdbusextended-qt5-devel-3.1.7.2-bp150.2.3.1 libdmusic1-3.1.7.2-bp150.2.3.1 libmpris-qt5-1-3.1.7.2-bp150.2.3.1 libmpris-qt5-devel-3.1.7.2-bp150.2.3.1 References: https://bugzilla.suse.com/1131464

1 0

openSUSE-RU-2019:1254-1: moderate: Recommended update for datovka
by maintenance＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Recommended Update: Recommended update for datovka ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1254-1 Rating: moderate References: #1104620 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for datovka fixes the following issues: - Update to 4.13.0 (boo#1104620): * Account renaming now possible * Special format downloading now alloved to "spisova sluzba" Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1254=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): datovka-4.13.0-15.1 datovka-debuginfo-4.13.0-15.1 datovka-debugsource-4.13.0-15.1 References: https://bugzilla.suse.com/1104620

1 0

openSUSE-SU-2019:1256-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1256-1 Rating: moderate References: #1126711 #1126713 #1126821 #1126823 #1127122 #1128722 Cross-References: CVE-2018-20783 CVE-2019-9020 CVE-2019-9021 CVE-2019-9023 CVE-2019-9024 CVE-2019-9641 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for php5 fixes the following issues: Security issues fixed: - CVE-2019-9024: Fixed a vulnerability in xmlrpc_decode function which could allow to a hostile XMLRPC server to cause memory read outside the allocated areas (bsc#1126821). - CVE-2019-9020: Fixed a heap out of bounds in xmlrpc_decode function (bsc#1126711). - CVE-2018-20783: Fixed a buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1127122). - CVE-2019-9021: Fixed a heap buffer-based buffer over-read in PHAR reading functions which could allow an attacker to read allocated and unallocated memory when parsing a phar file (bsc#1126713). - CVE-2019-9023: Fixed multiple heap-based buffer over-read instances in mbstring regular expression functions (bsc#1126823). - CVE-2019-9641: Fixed multiple invalid memory access in EXIF extension and improved insecure implementation of rename function (bsc#1128722). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1256=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-115.1 apache2-mod_php5-debuginfo-5.5.14-115.1 php5-5.5.14-115.1 php5-bcmath-5.5.14-115.1 php5-bcmath-debuginfo-5.5.14-115.1 php5-bz2-5.5.14-115.1 php5-bz2-debuginfo-5.5.14-115.1 php5-calendar-5.5.14-115.1 php5-calendar-debuginfo-5.5.14-115.1 php5-ctype-5.5.14-115.1 php5-ctype-debuginfo-5.5.14-115.1 php5-curl-5.5.14-115.1 php5-curl-debuginfo-5.5.14-115.1 php5-dba-5.5.14-115.1 php5-dba-debuginfo-5.5.14-115.1 php5-debuginfo-5.5.14-115.1 php5-debugsource-5.5.14-115.1 php5-devel-5.5.14-115.1 php5-dom-5.5.14-115.1 php5-dom-debuginfo-5.5.14-115.1 php5-enchant-5.5.14-115.1 php5-enchant-debuginfo-5.5.14-115.1 php5-exif-5.5.14-115.1 php5-exif-debuginfo-5.5.14-115.1 php5-fastcgi-5.5.14-115.1 php5-fastcgi-debuginfo-5.5.14-115.1 php5-fileinfo-5.5.14-115.1 php5-fileinfo-debuginfo-5.5.14-115.1 php5-firebird-5.5.14-115.1 php5-firebird-debuginfo-5.5.14-115.1 php5-fpm-5.5.14-115.1 php5-fpm-debuginfo-5.5.14-115.1 php5-ftp-5.5.14-115.1 php5-ftp-debuginfo-5.5.14-115.1 php5-gd-5.5.14-115.1 php5-gd-debuginfo-5.5.14-115.1 php5-gettext-5.5.14-115.1 php5-gettext-debuginfo-5.5.14-115.1 php5-gmp-5.5.14-115.1 php5-gmp-debuginfo-5.5.14-115.1 php5-iconv-5.5.14-115.1 php5-iconv-debuginfo-5.5.14-115.1 php5-imap-5.5.14-115.1 php5-imap-debuginfo-5.5.14-115.1 php5-intl-5.5.14-115.1 php5-intl-debuginfo-5.5.14-115.1 php5-json-5.5.14-115.1 php5-json-debuginfo-5.5.14-115.1 php5-ldap-5.5.14-115.1 php5-ldap-debuginfo-5.5.14-115.1 php5-mbstring-5.5.14-115.1 php5-mbstring-debuginfo-5.5.14-115.1 php5-mcrypt-5.5.14-115.1 php5-mcrypt-debuginfo-5.5.14-115.1 php5-mssql-5.5.14-115.1 php5-mssql-debuginfo-5.5.14-115.1 php5-mysql-5.5.14-115.1 php5-mysql-debuginfo-5.5.14-115.1 php5-odbc-5.5.14-115.1 php5-odbc-debuginfo-5.5.14-115.1 php5-opcache-5.5.14-115.1 php5-opcache-debuginfo-5.5.14-115.1 php5-openssl-5.5.14-115.1 php5-openssl-debuginfo-5.5.14-115.1 php5-pcntl-5.5.14-115.1 php5-pcntl-debuginfo-5.5.14-115.1 php5-pdo-5.5.14-115.1 php5-pdo-debuginfo-5.5.14-115.1 php5-pgsql-5.5.14-115.1 php5-pgsql-debuginfo-5.5.14-115.1 php5-phar-5.5.14-115.1 php5-phar-debuginfo-5.5.14-115.1 php5-posix-5.5.14-115.1 php5-posix-debuginfo-5.5.14-115.1 php5-pspell-5.5.14-115.1 php5-pspell-debuginfo-5.5.14-115.1 php5-readline-5.5.14-115.1 php5-readline-debuginfo-5.5.14-115.1 php5-shmop-5.5.14-115.1 php5-shmop-debuginfo-5.5.14-115.1 php5-snmp-5.5.14-115.1 php5-snmp-debuginfo-5.5.14-115.1 php5-soap-5.5.14-115.1 php5-soap-debuginfo-5.5.14-115.1 php5-sockets-5.5.14-115.1 php5-sockets-debuginfo-5.5.14-115.1 php5-sqlite-5.5.14-115.1 php5-sqlite-debuginfo-5.5.14-115.1 php5-suhosin-5.5.14-115.1 php5-suhosin-debuginfo-5.5.14-115.1 php5-sysvmsg-5.5.14-115.1 php5-sysvmsg-debuginfo-5.5.14-115.1 php5-sysvsem-5.5.14-115.1 php5-sysvsem-debuginfo-5.5.14-115.1 php5-sysvshm-5.5.14-115.1 php5-sysvshm-debuginfo-5.5.14-115.1 php5-tidy-5.5.14-115.1 php5-tidy-debuginfo-5.5.14-115.1 php5-tokenizer-5.5.14-115.1 php5-tokenizer-debuginfo-5.5.14-115.1 php5-wddx-5.5.14-115.1 php5-wddx-debuginfo-5.5.14-115.1 php5-xmlreader-5.5.14-115.1 php5-xmlreader-debuginfo-5.5.14-115.1 php5-xmlrpc-5.5.14-115.1 php5-xmlrpc-debuginfo-5.5.14-115.1 php5-xmlwriter-5.5.14-115.1 php5-xmlwriter-debuginfo-5.5.14-115.1 php5-xsl-5.5.14-115.1 php5-xsl-debuginfo-5.5.14-115.1 php5-zip-5.5.14-115.1 php5-zip-debuginfo-5.5.14-115.1 php5-zlib-5.5.14-115.1 php5-zlib-debuginfo-5.5.14-115.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-115.1 References: https://www.suse.com/security/cve/CVE-2018-20783.html https://www.suse.com/security/cve/CVE-2019-9020.html https://www.suse.com/security/cve/CVE-2019-9021.html https://www.suse.com/security/cve/CVE-2019-9023.html https://www.suse.com/security/cve/CVE-2019-9024.html https://www.suse.com/security/cve/CVE-2019-9641.html https://bugzilla.suse.com/1126711 https://bugzilla.suse.com/1126713 https://bugzilla.suse.com/1126821 https://bugzilla.suse.com/1126823 https://bugzilla.suse.com/1127122 https://bugzilla.suse.com/1128722

1 0

openSUSE-RU-2019:1255-1: moderate: Recommended update for datovka
by maintenance＠opensuse.org 23 Apr '19

23 Apr '19

openSUSE Recommended Update: Recommended update for datovka ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1255-1 Rating: moderate References: #1104620 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for datovka fixes the following issues: - Update to 4.13.0 (boo#1104620): * Account renaming now possible * Special format downloading now alloved to "spisova sluzba" Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1255=1 Package List: - openSUSE Leap 15.0 (x86_64): datovka-4.13.0-lp150.15.1 datovka-debuginfo-4.13.0-lp150.15.1 datovka-debugsource-4.13.0-lp150.15.1 References: https://bugzilla.suse.com/1104620

1 0

openSUSE-RU-2019:1253-1: Recommended update for gcompris-qt
by maintenance＠opensuse.org 21 Apr '19

21 Apr '19

openSUSE Recommended Update: Recommended update for gcompris-qt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1253-1 Rating: low References: #1093988 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gcompris-qt fixes the following issue (boo#1093988): - text corrections and translation updates - UI position and element interaction corrections - fixes to audio in several activities - corrections and improvements to multiple activities gcompris-qt-voices was updated to match. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1253=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): gcompris-qt-0.91-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): gcompris-qt-activities-0.91-bp150.2.6.1 gcompris-qt-lang-0.91-bp150.2.6.1 gcompris-qt-voices-0~20180517-bp150.2.6.1 References: https://bugzilla.suse.com/1093988

1 0

openSUSE-RU-2019:1251-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1251-1 Rating: moderate References: #1080156 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sssd fixes the following issues: - Rotate child debug file descriptors on SIGHUP (bsc#1080156) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1251=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libipa_hbac-devel-1.16.1-lp150.2.13.1 libipa_hbac0-1.16.1-lp150.2.13.1 libipa_hbac0-debuginfo-1.16.1-lp150.2.13.1 libnfsidmap-sss-1.16.1-lp150.2.13.1 libnfsidmap-sss-debuginfo-1.16.1-lp150.2.13.1 libsss_certmap-devel-1.16.1-lp150.2.13.1 libsss_certmap0-1.16.1-lp150.2.13.1 libsss_certmap0-debuginfo-1.16.1-lp150.2.13.1 libsss_idmap-devel-1.16.1-lp150.2.13.1 libsss_idmap0-1.16.1-lp150.2.13.1 libsss_idmap0-debuginfo-1.16.1-lp150.2.13.1 libsss_nss_idmap-devel-1.16.1-lp150.2.13.1 libsss_nss_idmap0-1.16.1-lp150.2.13.1 libsss_nss_idmap0-debuginfo-1.16.1-lp150.2.13.1 libsss_simpleifp-devel-1.16.1-lp150.2.13.1 libsss_simpleifp0-1.16.1-lp150.2.13.1 libsss_simpleifp0-debuginfo-1.16.1-lp150.2.13.1 python3-ipa_hbac-1.16.1-lp150.2.13.1 python3-ipa_hbac-debuginfo-1.16.1-lp150.2.13.1 python3-sss-murmur-1.16.1-lp150.2.13.1 python3-sss-murmur-debuginfo-1.16.1-lp150.2.13.1 python3-sss_nss_idmap-1.16.1-lp150.2.13.1 python3-sss_nss_idmap-debuginfo-1.16.1-lp150.2.13.1 python3-sssd-config-1.16.1-lp150.2.13.1 python3-sssd-config-debuginfo-1.16.1-lp150.2.13.1 sssd-1.16.1-lp150.2.13.1 sssd-ad-1.16.1-lp150.2.13.1 sssd-ad-debuginfo-1.16.1-lp150.2.13.1 sssd-dbus-1.16.1-lp150.2.13.1 sssd-dbus-debuginfo-1.16.1-lp150.2.13.1 sssd-debuginfo-1.16.1-lp150.2.13.1 sssd-debugsource-1.16.1-lp150.2.13.1 sssd-ipa-1.16.1-lp150.2.13.1 sssd-ipa-debuginfo-1.16.1-lp150.2.13.1 sssd-krb5-1.16.1-lp150.2.13.1 sssd-krb5-common-1.16.1-lp150.2.13.1 sssd-krb5-common-debuginfo-1.16.1-lp150.2.13.1 sssd-krb5-debuginfo-1.16.1-lp150.2.13.1 sssd-ldap-1.16.1-lp150.2.13.1 sssd-ldap-debuginfo-1.16.1-lp150.2.13.1 sssd-proxy-1.16.1-lp150.2.13.1 sssd-proxy-debuginfo-1.16.1-lp150.2.13.1 sssd-tools-1.16.1-lp150.2.13.1 sssd-tools-debuginfo-1.16.1-lp150.2.13.1 sssd-wbclient-1.16.1-lp150.2.13.1 sssd-wbclient-debuginfo-1.16.1-lp150.2.13.1 sssd-wbclient-devel-1.16.1-lp150.2.13.1 sssd-winbind-idmap-1.16.1-lp150.2.13.1 sssd-winbind-idmap-debuginfo-1.16.1-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): sssd-32bit-1.16.1-lp150.2.13.1 sssd-32bit-debuginfo-1.16.1-lp150.2.13.1 References: https://bugzilla.suse.com/1080156

1 0

openSUSE-RU-2019:1252-1: Recommended update for vncmanager-controller
by maintenance＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Recommended Update: Recommended update for vncmanager-controller ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1252-1 Rating: low References: #1102080 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for vncmanager-controller fixes the following issues: - Makes the vncmanager-controller extension load on newer gnome shell versions. (bsc#1102080) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1252=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): vncmanager-controller-1.0.0-5.3.1 vncmanager-controller-debuginfo-1.0.0-5.3.1 vncmanager-controller-debugsource-1.0.0-5.3.1 vncmanager-controller-gnome-1.0.0-5.3.1 References: https://bugzilla.suse.com/1102080

1 0

openSUSE-SU-2019:1250-1: moderate: Security update for glibc
by opensuse-security＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Security Update: Security update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1250-1 Rating: moderate References: #1100396 #1122729 #1130045 Cross-References: CVE-2016-10739 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for glibc fixes the following issues: Security issue fixed: - CVE-2016-10739: Fixed an improper implementation of getaddrinfo function which could allow applications to incorrectly assume that had parsed a valid string, without the possibility of embedded HTTP headers or other potentially dangerous substrings (bsc#1122729). Other issue fixed: - Fixed an issue where pthread_mutex_trylock did not use a correct order of instructions while maintained the robust mutex list due to missing compiler barriers (bsc#1130045). - Added new Japanese Era name support (bsc#1100396). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1250=1 Package List: - openSUSE Leap 15.0 (i586 i686 x86_64): glibc-2.26-lp150.11.17.1 glibc-debuginfo-2.26-lp150.11.17.1 glibc-debugsource-2.26-lp150.11.17.1 glibc-devel-2.26-lp150.11.17.1 glibc-devel-debuginfo-2.26-lp150.11.17.1 glibc-devel-static-2.26-lp150.11.17.1 glibc-locale-2.26-lp150.11.17.1 glibc-locale-base-2.26-lp150.11.17.1 glibc-locale-base-debuginfo-2.26-lp150.11.17.1 glibc-profile-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (i586 x86_64): glibc-extra-2.26-lp150.11.17.1 glibc-extra-debuginfo-2.26-lp150.11.17.1 glibc-utils-2.26-lp150.11.17.1 glibc-utils-debuginfo-2.26-lp150.11.17.1 glibc-utils-src-debugsource-2.26-lp150.11.17.1 nscd-2.26-lp150.11.17.1 nscd-debuginfo-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (noarch): glibc-html-2.26-lp150.11.17.1 glibc-i18ndata-2.26-lp150.11.17.1 glibc-info-2.26-lp150.11.17.1 - openSUSE Leap 15.0 (x86_64): glibc-32bit-2.26-lp150.11.17.1 glibc-32bit-debuginfo-2.26-lp150.11.17.1 glibc-devel-32bit-2.26-lp150.11.17.1 glibc-devel-32bit-debuginfo-2.26-lp150.11.17.1 glibc-devel-static-32bit-2.26-lp150.11.17.1 glibc-locale-base-32bit-2.26-lp150.11.17.1 glibc-locale-base-32bit-debuginfo-2.26-lp150.11.17.1 glibc-profile-32bit-2.26-lp150.11.17.1 glibc-utils-32bit-2.26-lp150.11.17.1 glibc-utils-32bit-debuginfo-2.26-lp150.11.17.1 References: https://www.suse.com/security/cve/CVE-2016-10739.html https://bugzilla.suse.com/1100396 https://bugzilla.suse.com/1122729 https://bugzilla.suse.com/1130045

1 0

openSUSE-RU-2019:1249-1: moderate: Recommended update for systemtap
by maintenance＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Recommended Update: Recommended update for systemtap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1249-1 Rating: moderate References: #1090047 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemtap fixes the following issues: - Fix glib2 is now built with SDT markers. (bsc#1090047) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1249=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): systemtap-3.2-lp150.5.3.2 systemtap-debuginfo-3.2-lp150.5.3.2 systemtap-debugsource-3.2-lp150.5.3.2 systemtap-headers-3.2-lp150.5.3.2 systemtap-runtime-3.2-lp150.5.3.2 systemtap-runtime-debuginfo-3.2-lp150.5.3.2 systemtap-sdt-devel-3.2-lp150.5.3.2 systemtap-server-3.2-lp150.5.3.2 systemtap-server-debuginfo-3.2-lp150.5.3.2 - openSUSE Leap 15.0 (noarch): systemtap-docs-3.2-lp150.5.3.1 References: https://bugzilla.suse.com/1090047

1 0

openSUSE-RU-2019:1247-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1247-1 Rating: moderate References: #1113702 #1122569 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fixed a regression of crashing lvm on multipath SAN (bsc#1113702) - Add exception handling to FCP lun enumeration (bsc#1113702) - Fix LOADER_TYPE parsing in grub2-once (bsc#1122569) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1247=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): grub2-2.02-26.1 grub2-branding-upstream-2.02-26.1 grub2-debuginfo-2.02-26.1 grub2-debugsource-2.02-26.1 grub2-i386-pc-2.02-26.1 - openSUSE Leap 42.3 (noarch): grub2-snapper-plugin-2.02-26.1 grub2-systemd-sleep-plugin-2.02-26.1 - openSUSE Leap 42.3 (x86_64): grub2-x86_64-efi-2.02-26.1 grub2-x86_64-xen-2.02-26.1 - openSUSE Leap 42.3 (i586): grub2-i386-efi-2.02-26.1 References: https://bugzilla.suse.com/1113702 https://bugzilla.suse.com/1122569

1 0

openSUSE-RU-2019:1248-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 20 Apr '19

20 Apr '19

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1248-1 Rating: moderate References: #1098758 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cluster-glue provides the following fix: - stonith:ibmhmc: Add "managedsyspat" and "password" as supported parameters. (bsc#1098758) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1248=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cluster-glue-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 cluster-glue-debuginfo-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 cluster-glue-debugsource-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue-devel-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue-devel-debuginfo-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue2-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue2-debuginfo-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue2-32bit-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1534346580.be86a9f2-lp150.2.3.1 References: https://bugzilla.suse.com/1098758

1 0

openSUSE-SU-2019:1246-1: moderate: Security update for blueman
by opensuse-security＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Security Update: Security update for blueman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1246-1 Rating: moderate References: #1083066 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication (boo#1083066). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1246=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): blueman-2.0.6-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): blueman-lang-2.0.6-bp150.2.6.1 thunar-sendto-blueman-2.0.6-bp150.2.6.1 References: https://bugzilla.suse.com/1083066

1 0

openSUSE-RU-2019:1243-1: moderate: Recommended update for at-spi2-core
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for at-spi2-core ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1243-1 Rating: moderate References: #1127792 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for at-spi2-core and at-spi2-atk fixes the following issues: - Bugfix: Querying table cell headers crashed the application (bsc#1127792). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1243=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): at-spi2-atk-common-2.26.3-lp150.3.3.1 at-spi2-atk-debugsource-2.26.3-lp150.3.3.1 at-spi2-atk-devel-2.26.3-lp150.3.3.1 at-spi2-atk-gtk2-2.26.3-lp150.3.3.1 at-spi2-atk-gtk2-debuginfo-2.26.3-lp150.3.3.1 at-spi2-core-2.26.3-lp150.4.3.1 at-spi2-core-debuginfo-2.26.3-lp150.4.3.1 at-spi2-core-debugsource-2.26.3-lp150.4.3.1 at-spi2-core-devel-2.26.3-lp150.4.3.1 libatk-bridge-2_0-0-2.26.3-lp150.3.3.1 libatk-bridge-2_0-0-debuginfo-2.26.3-lp150.3.3.1 libatspi0-2.26.3-lp150.4.3.1 libatspi0-debuginfo-2.26.3-lp150.4.3.1 typelib-1_0-Atspi-2_0-2.26.3-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): at-spi2-core-lang-2.26.3-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): at-spi2-core-devel-32bit-2.26.3-lp150.4.3.1 libatk-bridge-2_0-0-32bit-2.26.3-lp150.3.3.1 libatk-bridge-2_0-0-32bit-debuginfo-2.26.3-lp150.3.3.1 libatspi0-32bit-2.26.3-lp150.4.3.1 libatspi0-32bit-debuginfo-2.26.3-lp150.4.3.1 References: https://bugzilla.suse.com/1127792

1 0

openSUSE-RU-2019:1245-1: moderate: Recommended update for ft2demos
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for ft2demos ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1245-1 Rating: moderate References: #1091109 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ft2demos fixes the following issues: - Remove "Supplements: fonts-config" to avoid accidentally pulling in Qt dependencies on some non-Qt based desktops.(boo#1091109) fonts-config is fundamental but ft2demos seldom installs by end users. only fonts-config maintainers/debuggers may use ft2demos along to debug some issues. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1245=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1245=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ft2demos-2.6.3-5.6.1 - openSUSE Leap 15.0 (x86_64): ft2demos-2.9-lp150.3.3.1 ftbench-2.9-lp150.3.3.1 ftdiff-2.9-lp150.3.3.1 ftdump-2.9-lp150.3.3.1 ftgamma-2.9-lp150.3.3.1 ftgrid-2.9-lp150.3.3.1 ftinspect-2.9-lp150.3.3.1 ftlint-2.9-lp150.3.3.1 ftmulti-2.9-lp150.3.3.1 ftstring-2.9-lp150.3.3.1 ftvalid-2.9-lp150.3.3.1 ftview-2.9-lp150.3.3.1 References: https://bugzilla.suse.com/1091109

1 0

openSUSE-RU-2019:1241-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1241-1 Rating: moderate References: #1063704 #1129914 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for chrony fixes the following issues: - Fix ordering and dependencies of chronyd.service, so that it is started after name resolution is up (bsc#1129914). - Comment out the (server) pool statement in chrony.conf on SUSE Linux Enterprise (bsc#1063704). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1241=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): chrony-2.3-10.1 chrony-debuginfo-2.3-10.1 chrony-debugsource-2.3-10.1 References: https://bugzilla.suse.com/1063704 https://bugzilla.suse.com/1129914

1 0

openSUSE-RU-2019:1242-1: moderate: Recommended update for chrony
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for chrony ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1242-1 Rating: moderate References: #1129914 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for chrony fixes the following issues: - Fix ordering and dependencies of chronyd.service, so that it is started after name resolution is up (bsc#1129914). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1242=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): chrony-3.2-lp150.11.2 chrony-debuginfo-3.2-lp150.11.2 chrony-debugsource-3.2-lp150.11.2 References: https://bugzilla.suse.com/1129914

1 0

openSUSE-RU-2019:1240-1: moderate: Recommended update for virt-manager
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for virt-manager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1240-1 Rating: moderate References: #1054986 #1057078 #1078305 #1100558 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for virt-manager fixes the following issues: - Fix selection of network volumes (bsc#1100558) - When using a libvirt storage pool, virt-manager updates the pool information for the VM to use but leaves out the rbd pool host and auth fields from the definition. This causes failures in the VM when a volume from the pool is used. (bsc#1100558) - XEN: Domain is already running error occurs when creating new VM from existing disk (bsc#1057078, bsc#1078305) - Fix sle15 detection because of changes in osinfo-db (bsc#1054986) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1240=1 Package List: - openSUSE Leap 42.3 (noarch): virt-install-1.4.1-15.1 virt-manager-1.4.1-15.1 virt-manager-common-1.4.1-15.1 References: https://bugzilla.suse.com/1054986 https://bugzilla.suse.com/1057078 https://bugzilla.suse.com/1078305 https://bugzilla.suse.com/1100558

1 0

openSUSE-RU-2019:1244-1: moderate: Recommended update for yast2-pkg-bindings
by maintenance＠opensuse.org 19 Apr '19

19 Apr '19

openSUSE Recommended Update: Recommended update for yast2-pkg-bindings ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1244-1 Rating: moderate References: #1094468 #1097756 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-pkg-bindings fixes the following issues: - Does no longer save plugin services to the target system (bsc#1094468) - Fixes an error when saving services during an upgrade (bsc#1097756) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1244=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-pkg-bindings-4.0.13-lp150.2.10.1 yast2-pkg-bindings-debuginfo-4.0.13-lp150.2.10.1 yast2-pkg-bindings-debugsource-4.0.13-lp150.2.10.1 References: https://bugzilla.suse.com/1094468 https://bugzilla.suse.com/1097756

1 0

openSUSE-RU-2019:1238-1: Recommended update for tracker
by maintenance＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Recommended Update: Recommended update for tracker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1238-1 Rating: low References: #1017652 #1038829 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for tracker provides the following fixes: - Fix coredumps on some miners by whitelisting calls to dup2 and dup3 (bsc#1017652) - Refine BIND variable mapping (bsc#1038829). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1238=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libtracker-common-1_0-1.8.3-2.3.1 libtracker-common-1_0-debuginfo-1.8.3-2.3.1 libtracker-control-1_0-0-1.8.3-2.3.1 libtracker-control-1_0-0-debuginfo-1.8.3-2.3.1 libtracker-miner-1_0-0-1.8.3-2.3.1 libtracker-miner-1_0-0-debuginfo-1.8.3-2.3.1 libtracker-sparql-1_0-0-1.8.3-2.3.1 libtracker-sparql-1_0-0-debuginfo-1.8.3-2.3.1 tracker-1.8.3-2.3.1 tracker-debuginfo-1.8.3-2.3.1 tracker-debugsource-1.8.3-2.3.1 tracker-devel-1.8.3-2.3.1 tracker-miner-files-1.8.3-2.3.1 tracker-miner-files-debuginfo-1.8.3-2.3.1 typelib-1_0-Tracker-1_0-1.8.3-2.3.1 typelib-1_0-TrackerControl-1_0-1.8.3-2.3.1 typelib-1_0-TrackerMiner-1_0-1.8.3-2.3.1 - openSUSE Leap 42.3 (noarch): tracker-lang-1.8.3-2.3.1 - openSUSE Leap 42.3 (x86_64): nautilus-extension-tracker-tags-1.8.3-2.3.1 nautilus-extension-tracker-tags-debuginfo-1.8.3-2.3.1 tracker-extras-debugsource-1.8.3-2.3.1 tracker-gui-1.8.3-2.3.1 tracker-gui-debuginfo-1.8.3-2.3.1 tracker-miner-rss-1.8.3-2.3.1 tracker-miner-rss-debuginfo-1.8.3-2.3.1 References: https://bugzilla.suse.com/1017652 https://bugzilla.suse.com/1038829

1 0

openSUSE-SU-2019:1239-1: moderate: Security update for libqt5-qtbase
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for libqt5-qtbase ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1239-1 Rating: moderate References: #1108889 #1118597 #1129662 #1130246 Cross-References: CVE-2018-19870 CVE-2018-19872 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for libqt5-qtbase fixes the following issues: Security issues fixed: - CVE-2018-19872: Fixed an issue which could allow a division by zero leading to crash (bsc#1130246). - CVE-2018-19870: Fixed an improper check in QImage allocation which could allow Denial of Service when opening crafted gif files (bsc#1118597). Other issue addressed: - Fixed an issue which showing remote locations was not allowed (bsc#1129662). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1239=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libQt5Bootstrap-devel-static-5.9.4-lp150.11.1 libQt5Concurrent-devel-5.9.4-lp150.11.1 libQt5Concurrent5-5.9.4-lp150.11.1 libQt5Concurrent5-debuginfo-5.9.4-lp150.11.1 libQt5Core-devel-5.9.4-lp150.11.1 libQt5Core5-5.9.4-lp150.11.1 libQt5Core5-debuginfo-5.9.4-lp150.11.1 libQt5DBus-devel-5.9.4-lp150.11.1 libQt5DBus-devel-debuginfo-5.9.4-lp150.11.1 libQt5DBus5-5.9.4-lp150.11.1 libQt5DBus5-debuginfo-5.9.4-lp150.11.1 libQt5Gui-devel-5.9.4-lp150.11.1 libQt5Gui5-5.9.4-lp150.11.1 libQt5Gui5-debuginfo-5.9.4-lp150.11.1 libQt5KmsSupport-devel-static-5.9.4-lp150.11.1 libQt5Network-devel-5.9.4-lp150.11.1 libQt5Network5-5.9.4-lp150.11.1 libQt5Network5-debuginfo-5.9.4-lp150.11.1 libQt5OpenGL-devel-5.9.4-lp150.11.1 libQt5OpenGL5-5.9.4-lp150.11.1 libQt5OpenGL5-debuginfo-5.9.4-lp150.11.1 libQt5OpenGLExtensions-devel-static-5.9.4-lp150.11.1 libQt5PlatformHeaders-devel-5.9.4-lp150.11.1 libQt5PlatformSupport-devel-static-5.9.4-lp150.11.1 libQt5PrintSupport-devel-5.9.4-lp150.11.1 libQt5PrintSupport5-5.9.4-lp150.11.1 libQt5PrintSupport5-debuginfo-5.9.4-lp150.11.1 libQt5Sql-devel-5.9.4-lp150.11.1 libQt5Sql5-5.9.4-lp150.11.1 libQt5Sql5-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-mysql-5.9.4-lp150.11.1 libQt5Sql5-mysql-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-postgresql-5.9.4-lp150.11.1 libQt5Sql5-postgresql-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-sqlite-5.9.4-lp150.11.1 libQt5Sql5-sqlite-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-debuginfo-5.9.4-lp150.11.1 libQt5Test-devel-5.9.4-lp150.11.1 libQt5Test5-5.9.4-lp150.11.1 libQt5Test5-debuginfo-5.9.4-lp150.11.1 libQt5Widgets-devel-5.9.4-lp150.11.1 libQt5Widgets5-5.9.4-lp150.11.1 libQt5Widgets5-debuginfo-5.9.4-lp150.11.1 libQt5Xml-devel-5.9.4-lp150.11.1 libQt5Xml5-5.9.4-lp150.11.1 libQt5Xml5-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-common-devel-5.9.4-lp150.11.1 libqt5-qtbase-common-devel-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-debugsource-5.9.4-lp150.11.1 libqt5-qtbase-devel-5.9.4-lp150.11.1 libqt5-qtbase-examples-5.9.4-lp150.11.1 libqt5-qtbase-examples-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-platformtheme-gtk3-5.9.4-lp150.11.1 libqt5-qtbase-platformtheme-gtk3-debuginfo-5.9.4-lp150.11.1 - openSUSE Leap 15.0 (noarch): libQt5Core-private-headers-devel-5.9.4-lp150.11.1 libQt5DBus-private-headers-devel-5.9.4-lp150.11.1 libQt5Gui-private-headers-devel-5.9.4-lp150.11.1 libQt5KmsSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5Network-private-headers-devel-5.9.4-lp150.11.1 libQt5OpenGL-private-headers-devel-5.9.4-lp150.11.1 libQt5PlatformSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5PrintSupport-private-headers-devel-5.9.4-lp150.11.1 libQt5Sql-private-headers-devel-5.9.4-lp150.11.1 libQt5Test-private-headers-devel-5.9.4-lp150.11.1 libQt5Widgets-private-headers-devel-5.9.4-lp150.11.1 libqt5-qtbase-private-headers-devel-5.9.4-lp150.11.1 - openSUSE Leap 15.0 (x86_64): libQt5Bootstrap-devel-static-32bit-5.9.4-lp150.11.1 libQt5Concurrent-devel-32bit-5.9.4-lp150.11.1 libQt5Concurrent5-32bit-5.9.4-lp150.11.1 libQt5Concurrent5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Core-devel-32bit-5.9.4-lp150.11.1 libQt5Core5-32bit-5.9.4-lp150.11.1 libQt5Core5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5DBus-devel-32bit-5.9.4-lp150.11.1 libQt5DBus-devel-32bit-debuginfo-5.9.4-lp150.11.1 libQt5DBus5-32bit-5.9.4-lp150.11.1 libQt5DBus5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Gui-devel-32bit-5.9.4-lp150.11.1 libQt5Gui5-32bit-5.9.4-lp150.11.1 libQt5Gui5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Network-devel-32bit-5.9.4-lp150.11.1 libQt5Network5-32bit-5.9.4-lp150.11.1 libQt5Network5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5OpenGL-devel-32bit-5.9.4-lp150.11.1 libQt5OpenGL5-32bit-5.9.4-lp150.11.1 libQt5OpenGL5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5OpenGLExtensions-devel-static-32bit-5.9.4-lp150.11.1 libQt5PlatformSupport-devel-static-32bit-5.9.4-lp150.11.1 libQt5PrintSupport-devel-32bit-5.9.4-lp150.11.1 libQt5PrintSupport5-32bit-5.9.4-lp150.11.1 libQt5PrintSupport5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql-devel-32bit-5.9.4-lp150.11.1 libQt5Sql5-32bit-5.9.4-lp150.11.1 libQt5Sql5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-mysql-32bit-5.9.4-lp150.11.1 libQt5Sql5-mysql-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-postgresql-32bit-5.9.4-lp150.11.1 libQt5Sql5-postgresql-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-sqlite-32bit-5.9.4-lp150.11.1 libQt5Sql5-sqlite-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-32bit-5.9.4-lp150.11.1 libQt5Sql5-unixODBC-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Test-devel-32bit-5.9.4-lp150.11.1 libQt5Test5-32bit-5.9.4-lp150.11.1 libQt5Test5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Widgets-devel-32bit-5.9.4-lp150.11.1 libQt5Widgets5-32bit-5.9.4-lp150.11.1 libQt5Widgets5-32bit-debuginfo-5.9.4-lp150.11.1 libQt5Xml-devel-32bit-5.9.4-lp150.11.1 libQt5Xml5-32bit-5.9.4-lp150.11.1 libQt5Xml5-32bit-debuginfo-5.9.4-lp150.11.1 libqt5-qtbase-examples-32bit-5.9.4-lp150.11.1 libqt5-qtbase-examples-32bit-debuginfo-5.9.4-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2018-19870.html https://www.suse.com/security/cve/CVE-2018-19872.html https://bugzilla.suse.com/1108889 https://bugzilla.suse.com/1118597 https://bugzilla.suse.com/1129662 https://bugzilla.suse.com/1130246

1 0

openSUSE-SU-2019:1235-1: moderate: Security update for xmltooling
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for xmltooling ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1235-1 Rating: moderate References: #1129537 Cross-References: CVE-2019-9628 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for xmltooling fixes the following issues: Security issue fixed: - CVE-2019-9628: Fixed an improper handling of exception in XMLTooling library which could result in denial of service against the application using XMLTooling (bsc#1129537). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1235=1 Package List: - openSUSE Leap 15.0 (x86_64): libxmltooling-devel-1.6.4-lp150.2.3.1 libxmltooling7-1.6.4-lp150.2.3.1 libxmltooling7-debuginfo-1.6.4-lp150.2.3.1 xmltooling-debugsource-1.6.4-lp150.2.3.1 xmltooling-schemas-1.6.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9628.html https://bugzilla.suse.com/1129537

1 0

openSUSE-SU-2019:1236-1: important: Security update for wget
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for wget ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1236-1 Rating: important References: #1131493 Cross-References: CVE-2019-5953 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wget fixes the following issues: Security issue fixed: - CVE-2019-5953: Fixed a buffer overflow vulnerability which might cause code execution (bsc#1131493). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1236=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): wget-1.19.5-lp150.7.1 wget-debuginfo-1.19.5-lp150.7.1 wget-debugsource-1.19.5-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2019-5953.html https://bugzilla.suse.com/1131493

1 0

openSUSE-RU-2019:1234-1: moderate: Security update for obs-service-recompress, obs-service-set_version, obs-service-tar_scm
by maintenance＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Recommended Update: Security update for obs-service-recompress, obs-service-set_version, obs-service-tar_scm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1234-1 Rating: moderate References: #1131059 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update ships obs-service-recompress, obs-service-set_version, obs-service-tar_scm. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1234=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): bzr-2.7.0-11.3.1 bzr-debuginfo-2.7.0-11.3.1 bzr-debugsource-2.7.0-11.3.1 bzr-test-2.7.0-11.3.1 - openSUSE Leap 42.3 (noarch): bzr-lang-2.7.0-11.3.1 obs-service-appimage-0.10.6.1551887937.e42c270-8.3.1 obs-service-obs_scm-0.10.6.1551887937.e42c270-8.3.1 obs-service-obs_scm-common-0.10.6.1551887937.e42c270-8.3.1 obs-service-recompress-0.3.1+git20170704.59bf231-11.3.1 obs-service-set_version-0.5.11-11.1 obs-service-snapcraft-0.10.6.1551887937.e42c270-8.3.1 obs-service-tar-0.10.6.1551887937.e42c270-8.3.1 obs-service-tar_scm-0.10.6.1551887937.e42c270-8.3.1 References: https://bugzilla.suse.com/1131059

1 0

openSUSE-SU-2019:1237-1: moderate: Security update for tar
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for tar ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1237-1 Rating: moderate References: #1120610 #1130496 Cross-References: CVE-2018-20482 CVE-2019-9923 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for tar fixes the following issues: Security issues fixed: - CVE-2019-9923: Fixed a denial of service while parsing certain archives with malformed extended headers in pax_decode_header() (bsc#1130496). - CVE-2018-20482: Fixed a denial of service when the '--sparse' option mishandles file shrinkage during read access (bsc#1120610). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1237=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): tar-1.30-lp150.7.1 tar-debuginfo-1.30-lp150.7.1 tar-debugsource-1.30-lp150.7.1 tar-rmt-1.30-lp150.7.1 tar-rmt-debuginfo-1.30-lp150.7.1 tar-tests-1.30-lp150.7.1 tar-tests-debuginfo-1.30-lp150.7.1 - openSUSE Leap 15.0 (noarch): tar-backup-scripts-1.30-lp150.7.1 tar-doc-1.30-lp150.7.1 tar-lang-1.30-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-20482.html https://www.suse.com/security/cve/CVE-2019-9923.html https://bugzilla.suse.com/1120610 https://bugzilla.suse.com/1130496

1 0

openSUSE-SU-2019:1230-1: moderate: Security update for lxc
by opensuse-security＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Security Update: Security update for lxc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1230-1 Rating: moderate References: #988348 Cross-References: CVE-2018-6556 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for lxc fixes the following issues: The following security vulnerability was fixed: - CVE-2018-6556: Fixed an information leak and possible open() side effects to regular users via lxc-user-nic (boo#988348) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1230=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): liblxc-devel-2.0.9-bp150.5.6.1 liblxc1-2.0.9-bp150.5.6.1 lxc-2.0.9-bp150.5.6.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://bugzilla.suse.com/988348

1 0

openSUSE-RU-2019:1233-1: moderate: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1233-1 Rating: moderate References: #1128323 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issues: The Python RPM macros were update to version 20190408.32abece to fix lots of bugs. (bsc#1128323) * Rewrite pytest and pytest_arch into Lua macros with multiple arguments. * We should preserve existing PYTHONPATH. * Add --ignore to pytest calls to ignore build directories. * Actually make pytest into function to capture arguments as well * Add pytest definitions. * Use upstream-recommended %{_rpmconfigdir}/macros.d directory for the rpm macros. * Fix an issue with epoch printing having too many \ * Remove packaging/ dir * add epoch while printing "Provides:" * better fix for macro usage in rpm 4.14 * Fix macro usage for rpm 4.14 * use %_specfile macro to locate the spec file, this should help with factory-auto bot problems as well as issue#3 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1233=1 Package List: - openSUSE Leap 42.3 (noarch): python-rpm-macros-20190408.32abece-6.1 References: https://bugzilla.suse.com/1128323

1 0

openSUSE-RU-2019:1232-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1232-1 Rating: moderate References: #1065237 #1115550 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openssh fixes the following issues: - Fix SSHD termination of multichannel sessions with non-root users (error on 'mm_request_receive_expect') (bsc#1115550) - Fix a double free() in the KDF CAVS testing tool (bsc#1065237) Please note that this is a FIPS certification helper tool and can not get attacker input. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1232=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): openssh-7.6p1-lp150.8.22.1 openssh-cavs-7.6p1-lp150.8.22.1 openssh-cavs-debuginfo-7.6p1-lp150.8.22.1 openssh-debuginfo-7.6p1-lp150.8.22.1 openssh-debugsource-7.6p1-lp150.8.22.1 openssh-fips-7.6p1-lp150.8.22.1 openssh-helpers-7.6p1-lp150.8.22.1 openssh-helpers-debuginfo-7.6p1-lp150.8.22.1 References: https://bugzilla.suse.com/1065237 https://bugzilla.suse.com/1115550

1 0

openSUSE-RU-2019:1231-1: moderate: Recommended update for zypper-docker
by maintenance＠opensuse.org 18 Apr '19

18 Apr '19

openSUSE Recommended Update: Recommended update for zypper-docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1231-1 Rating: moderate References: #1018823 #1022052 #1097442 #1098017 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for zypper-docker to version 2.0.0 contains the following changes: Features: * Allow inspection of stopped containers Using zypper-docker luc,lpc or pchkc on a stopped container is now possible. * Analyze container instead of base image by default Note: This is a backwards incompatible change. If the base image of a container needs to be analyzed, which was the former default a new --base flag can be used. e.g. zypper-docker pchkc --base <Container-ID> Minor Improvements / Fixes: * Add short forms of commands to help section (bsc#1022052) * Fix bug that caused images not to be removed properly in some cases * Fix bug that caused lpc command to log to stdout * Fix bug that caused force flag not to work with zypper-docker images * Fix zypper-docker ps command * Fix bug with zypper-docker up/patch --no-recommends * Fix update behavior when getting a zypper update Other: * Update and use zypper exit codes (bsc#1018823) * Support recent version of the docker API This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1231=1 Package List: - openSUSE Leap 15.0 (x86_64): zypper-docker-2.0.0-lp150.2.3.2 zypper-docker-debuginfo-2.0.0-lp150.2.3.2 zypper-docker-debugsource-2.0.0-lp150.2.3.2 References: https://bugzilla.suse.com/1018823 https://bugzilla.suse.com/1022052 https://bugzilla.suse.com/1097442 https://bugzilla.suse.com/1098017

1 0

openSUSE-SU-2019:1224-1: Security update for blktrace
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for blktrace ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1224-1 Rating: low References: #1091942 Cross-References: CVE-2018-10689 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for blktrace fixes the following issues: - CVE-2018-10689: Prevent buffer overflow in the dev_map_read function because the device and devno arrays were too small (bsc#1091942) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1224=1 Package List: - openSUSE Leap 15.0 (x86_64): blktrace-1.1.0+git.20170126-lp150.2.3.1 blktrace-debuginfo-1.1.0+git.20170126-lp150.2.3.1 blktrace-debugsource-1.1.0+git.20170126-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-10689.html https://bugzilla.suse.com/1091942

1 0

openSUSE-SU-2019:1227-1: important: Security update for lxc, lxcfs
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for lxc, lxcfs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1227-1 Rating: important References: #1122185 #1131762 #988348 Cross-References: CVE-2018-6556 CVE-2019-5736 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for lxc, lxcfs to version 3.1.0 fixes the following issues: Security issues fixed: - CVE-2019-5736: Fixed a container breakout vulnerability (boo#1122185). - CVE-2018-6556: Enable setuid bit on lxc-user-nic (boo#988348). Non-security issues fixed: - Update to LXC 3.1.0. The changelog is far too long to include here, please look at https://linuxcontainers.org/. (boo#1131762) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1227=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): liblxc-devel-3.1.0-bp150.5.3.1 liblxc1-3.1.0-bp150.5.3.1 lxc-3.1.0-bp150.5.3.1 lxcfs-3.0.3-bp150.3.3.1 lxcfs-debuginfo-3.0.3-bp150.3.3.1 lxcfs-debugsource-3.0.3-bp150.3.3.1 pam_cgfs-3.1.0-bp150.5.3.1 - openSUSE Backports SLE-15 (noarch): lxc-bash-completion-3.1.0-bp150.5.3.1 lxcfs-hooks-lxc-3.0.3-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-6556.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1122185 https://bugzilla.suse.com/1131762 https://bugzilla.suse.com/988348

1 0

openSUSE-SU-2019:1223-1: moderate: Security update for SDL
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for SDL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1223-1 Rating: moderate References: #1124799 #1124800 #1124802 #1124803 #1124805 #1124806 #1124824 #1124825 #1124826 #1124827 #1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1223=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): SDL-debugsource-1.2.15-lp150.2.3.1 libSDL-1_2-0-1.2.15-lp150.2.3.1 libSDL-1_2-0-debuginfo-1.2.15-lp150.2.3.1 libSDL-devel-1.2.15-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libSDL-1_2-0-32bit-1.2.15-lp150.2.3.1 libSDL-1_2-0-32bit-debuginfo-1.2.15-lp150.2.3.1 libSDL-devel-32bit-1.2.15-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-7572.html https://www.suse.com/security/cve/CVE-2019-7573.html https://www.suse.com/security/cve/CVE-2019-7574.html https://www.suse.com/security/cve/CVE-2019-7575.html https://www.suse.com/security/cve/CVE-2019-7576.html https://www.suse.com/security/cve/CVE-2019-7577.html https://www.suse.com/security/cve/CVE-2019-7578.html https://www.suse.com/security/cve/CVE-2019-7635.html https://www.suse.com/security/cve/CVE-2019-7636.html https://www.suse.com/security/cve/CVE-2019-7637.html https://www.suse.com/security/cve/CVE-2019-7638.html https://bugzilla.suse.com/1124799 https://bugzilla.suse.com/1124800 https://bugzilla.suse.com/1124802 https://bugzilla.suse.com/1124803 https://bugzilla.suse.com/1124805 https://bugzilla.suse.com/1124806 https://bugzilla.suse.com/1124824 https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1124826 https://bugzilla.suse.com/1124827 https://bugzilla.suse.com/1125099

1 0

openSUSE-SU-2019:1226-1: important: Security update for xen
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1226-1 Rating: important References: #1026236 #1027519 #1069468 #1105528 #1114988 #1115040 #1115045 #1115047 #1116380 #1117756 #1119161 #1123157 #1126140 #1126141 #1126192 #1126195 #1126196 #1126197 #1126198 #1126201 #1126325 #1127400 #1129623 Cross-References: CVE-2018-19665 CVE-2018-19961 CVE-2018-19962 CVE-2018-19965 CVE-2018-19966 CVE-2018-19967 CVE-2019-6778 CVE-2019-9824 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has 15 fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service (DoS). (XSA-282) (bsc#1114988) - CVE-2019-6778: Fixed a heap buffer overflow in tcp_emu() found in slirp (bsc#1123157). - Fixed an issue which could allow malicious or buggy guests with passed through PCI devices to be able to escalate their privileges, crash the host, or access data belonging to other guests. Additionally memory leaks were also possible (bsc#1126140). - Fixed a race condition issue which could allow malicious PV guests to escalate their privilege to that of the hypervisor (bsc#1126141). - Fixed an issue which could allow a malicious unprivileged guest userspace process to escalate its privilege to that of other userspace processes in the same guest and potentially thereby to that of the guest operating system (bsc#1126201). - CVE-2019-9824: Fixed an information leak in SLiRP networking implementation which could allow a user/process to read uninitialised stack memory contents (bsc#1129623). - CVE-2018-19961 CVE-2018-19962: Fixed insufficient TLB flushing / improper large page mappings with AMD IOMMUs (XSA-275)(bsc#1115040). - CVE-2018-19965: Fixed denial of service issue from attempting to use INVPCID with a non-canonical addresses (XSA-279)(bsc#1115045). - CVE-2018-19966: Fixed issue introduced by XSA-240 that could have caused conflicts with shadow paging (XSA-280)(bsc#1115047). - Fixed an issue which could allow malicious PV guests may cause a host crash or gain access to data pertaining to other guests.Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack (bsc#1126198). - Fixed multiple access violations introduced by XENMEM_exchange hypercall which could allow a single PV guest to leak arbitrary amounts of memory, leading to a denial of service (bsc#1126192). - Fixed an issue which could allow malicious 64bit PV guests to cause a host crash (bsc#1127400). - Fixed an issue which could allow malicious or buggy x86 PV guest kernels to mount a Denial of Service attack affecting the whole system (bsc#1126197). - Fixed an issue which could allow an untrusted PV domain with access to a physical device to DMA into its own pagetables leading to privilege escalation (bsc#1126195). - Fixed an issue which could allow a malicious or buggy x86 PV guest kernels can mount a Denial of Service attack affecting the whole system (bsc#1126196). Other issues addressed: - Upstream bug fixes (bsc#1027519) - Fixed an issue where live migrations were failing when spectre was enabled on xen boot cmdline (bsc#1116380). - Fixed an issue where setup of grant_tables and other variables may fail (bsc#1126325). - Fixed a building issue (bsc#1119161). - Fixed an issue where xpti=no-dom0 was not working as expected (bsc#1105528). - Packages should no longer use /var/adm/fillup-templates (bsc#1069468). - Added Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs (bsc#1026236). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1226=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): xen-debugsource-4.9.4_02-37.1 xen-devel-4.9.4_02-37.1 xen-libs-4.9.4_02-37.1 xen-libs-debuginfo-4.9.4_02-37.1 xen-tools-domU-4.9.4_02-37.1 xen-tools-domU-debuginfo-4.9.4_02-37.1 - openSUSE Leap 42.3 (x86_64): xen-4.9.4_02-37.1 xen-doc-html-4.9.4_02-37.1 xen-libs-32bit-4.9.4_02-37.1 xen-libs-debuginfo-32bit-4.9.4_02-37.1 xen-tools-4.9.4_02-37.1 xen-tools-debuginfo-4.9.4_02-37.1 References: https://www.suse.com/security/cve/CVE-2018-19665.html https://www.suse.com/security/cve/CVE-2018-19961.html https://www.suse.com/security/cve/CVE-2018-19962.html https://www.suse.com/security/cve/CVE-2018-19965.html https://www.suse.com/security/cve/CVE-2018-19966.html https://www.suse.com/security/cve/CVE-2018-19967.html https://www.suse.com/security/cve/CVE-2019-6778.html https://www.suse.com/security/cve/CVE-2019-9824.html https://bugzilla.suse.com/1026236 https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1069468 https://bugzilla.suse.com/1105528 https://bugzilla.suse.com/1114988 https://bugzilla.suse.com/1115040 https://bugzilla.suse.com/1115045 https://bugzilla.suse.com/1115047 https://bugzilla.suse.com/1116380 https://bugzilla.suse.com/1117756 https://bugzilla.suse.com/1119161 https://bugzilla.suse.com/1123157 https://bugzilla.suse.com/1126140 https://bugzilla.suse.com/1126141 https://bugzilla.suse.com/1126192 https://bugzilla.suse.com/1126195 https://bugzilla.suse.com/1126196 https://bugzilla.suse.com/1126197 https://bugzilla.suse.com/1126198 https://bugzilla.suse.com/1126201 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127400 https://bugzilla.suse.com/1129623

1 0

openSUSE-SU-2019:1229-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1229-1 Rating: moderate References: #1102359 #1102364 Cross-References: CVE-2018-14522 CVE-2018-14523 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for aubio fixes the following issues: - CVE-2018-14522: Fixed a crash in aubio_pitch_set_unit (bsc#1102359) - CVE-2018-14523: Fixed a buffer overrread resulting in crash or information leakage in new_aubio_pitchyinfft (bsc#1102364) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1229=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): python-aubio-debugsource-0.4.6-bp150.3.9.1 python2-aubio-0.4.6-bp150.3.9.1 python2-aubio-debuginfo-0.4.6-bp150.3.9.1 python3-aubio-0.4.6-bp150.3.9.1 python3-aubio-debuginfo-0.4.6-bp150.3.9.1 - openSUSE Backports SLE-15 (x86_64): aubio-tools-0.4.6-bp150.3.9.1 libaubio-devel-0.4.6-bp150.3.9.1 libaubio5-0.4.6-bp150.3.9.1 References: https://www.suse.com/security/cve/CVE-2018-14522.html https://www.suse.com/security/cve/CVE-2018-14523.html https://bugzilla.suse.com/1102359 https://bugzilla.suse.com/1102364

1 0

openSUSE-SU-2019:1222-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1222-1 Rating: moderate References: #1119687 #1131576 Cross-References: CVE-2018-20346 CVE-2018-20506 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for sqlite3 fixes the following issues: Security issues fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687). - CVE-2018-20506: Fixed an integer overflow when FTS3 extension is enabled (bsc#1131576). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1222=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsqlite3-0-3.8.10.2-11.3.1 libsqlite3-0-debuginfo-3.8.10.2-11.3.1 sqlite3-3.8.10.2-11.3.1 sqlite3-debuginfo-3.8.10.2-11.3.1 sqlite3-debugsource-3.8.10.2-11.3.1 sqlite3-devel-3.8.10.2-11.3.1 - openSUSE Leap 42.3 (x86_64): libsqlite3-0-32bit-3.8.10.2-11.3.1 libsqlite3-0-debuginfo-32bit-3.8.10.2-11.3.1 - openSUSE Leap 42.3 (noarch): sqlite3-doc-3.8.10.2-11.3.1 References: https://www.suse.com/security/cve/CVE-2018-20346.html https://www.suse.com/security/cve/CVE-2018-20506.html https://bugzilla.suse.com/1119687 https://bugzilla.suse.com/1131576

1 0

openSUSE-SU-2019:1225-1: Security update for flac
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for flac ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1225-1 Rating: low References: #1091045 Cross-References: CVE-2017-6888 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for flac fixes the following issues: - CVE-2017-6888: An error in the "read_metadata_vorbiscomment_()" function could be exploited to cause a memory leak via a specially crafted FLAC file (bsc#1091045). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1225=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): flac-1.3.2-lp150.2.3.1 flac-debuginfo-1.3.2-lp150.2.3.1 flac-debugsource-1.3.2-lp150.2.3.1 flac-devel-1.3.2-lp150.2.3.1 libFLAC++6-1.3.2-lp150.2.3.1 libFLAC++6-debuginfo-1.3.2-lp150.2.3.1 libFLAC8-1.3.2-lp150.2.3.1 libFLAC8-debuginfo-1.3.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): flac-doc-1.3.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): flac-devel-32bit-1.3.2-lp150.2.3.1 libFLAC++6-32bit-1.3.2-lp150.2.3.1 libFLAC++6-32bit-debuginfo-1.3.2-lp150.2.3.1 libFLAC8-32bit-1.3.2-lp150.2.3.1 libFLAC8-32bit-debuginfo-1.3.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-6888.html https://bugzilla.suse.com/1091045

1 0

openSUSE-SU-2019:1228-1: moderate: Security update for pspp
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for pspp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1228-1 Rating: moderate References: #1127343 Cross-References: CVE-2019-9211 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pspp fixes the following issues: - CVE-2019-9211: Handle a reachable assertion in write_long_string_missing_values() in libdata.a that could have lead to denial of service. (boo#1127343). - Remove excessive -n argument to %build, and excessive %defattr lines. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1228=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): pspp-1.2.0-bp150.3.6.1 pspp-devel-1.2.0-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-9211.html https://bugzilla.suse.com/1127343

1 0

openSUSE-RU-2019:1219-1: moderate: Recommended update for autoyast2
by maintenance＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Recommended Update: Recommended update for autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1219-1 Rating: moderate References: #1057597 #1123091 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for autoyast2 provide the following fixes: - Do not try to resize LVM partitions within a RAID system. (bsc#1057597) - Fix conflicting items in rule dialogs. (bsc#1123091) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1219=1 Package List: - openSUSE Leap 42.3 (noarch): autoyast2-3.2.32.2-12.1 autoyast2-installation-3.2.32.2-12.1 References: https://bugzilla.suse.com/1057597 https://bugzilla.suse.com/1123091

1 0

openSUSE-SU-2019:1220-1: important: Security update for dovecot22
by opensuse-security＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Security Update: Security update for dovecot22 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1220-1 Rating: important References: #1111789 #1123022 #1130116 Cross-References: CVE-2019-3814 CVE-2019-7524 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for dovecot22 fixes the following issues: Security issues fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack overflow allowing local root escalation (bsc#1130116). - CVE-2019-3814: Fixed a vulnerability related to SSL client certificate authentication (bsc#1123022). Other issue fixed: - Fixed handling of command continuation (bsc#1111789). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1220=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dovecot22-2.2.31-2.12.1 dovecot22-backend-mysql-2.2.31-2.12.1 dovecot22-backend-mysql-debuginfo-2.2.31-2.12.1 dovecot22-backend-pgsql-2.2.31-2.12.1 dovecot22-backend-pgsql-debuginfo-2.2.31-2.12.1 dovecot22-backend-sqlite-2.2.31-2.12.1 dovecot22-backend-sqlite-debuginfo-2.2.31-2.12.1 dovecot22-debuginfo-2.2.31-2.12.1 dovecot22-debugsource-2.2.31-2.12.1 dovecot22-devel-2.2.31-2.12.1 dovecot22-fts-2.2.31-2.12.1 dovecot22-fts-debuginfo-2.2.31-2.12.1 dovecot22-fts-lucene-2.2.31-2.12.1 dovecot22-fts-lucene-debuginfo-2.2.31-2.12.1 dovecot22-fts-solr-2.2.31-2.12.1 dovecot22-fts-solr-debuginfo-2.2.31-2.12.1 dovecot22-fts-squat-2.2.31-2.12.1 dovecot22-fts-squat-debuginfo-2.2.31-2.12.1 References: https://www.suse.com/security/cve/CVE-2019-3814.html https://www.suse.com/security/cve/CVE-2019-7524.html https://bugzilla.suse.com/1111789 https://bugzilla.suse.com/1123022 https://bugzilla.suse.com/1130116

1 0

openSUSE-RU-2019:1221-1: moderate: Recommended update for yast2-iscsi-lio-server
by maintenance＠opensuse.org 17 Apr '19

17 Apr '19

openSUSE Recommended Update: Recommended update for yast2-iscsi-lio-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1221-1 Rating: moderate References: #1123381 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-iscsi-lio-server fixes the following issues: - iscsi server enables discovery authentication unexpectedly (bsc#1123381) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1221=1 Package List: - openSUSE Leap 42.3 (noarch): yast2-iscsi-lio-server-3.2.2-2.3.1 References: https://bugzilla.suse.com/1123381

1 0

openSUSE-RU-2019:1218-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1218-1 Rating: moderate References: #1117381 #1117934 #1128374 #1128772 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for pacemaker provides the following fixes: - libcrmcluster: Avoid use of NULL when searching for remote node. (bsc#1128772) - crmd: Delete resource from lrmd when appropriate. (bsc#1117381) - scheduler: Respect the order of constraints when relevant resources are being probed. (bsc#1117934, bsc#1128374) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1218=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libpacemaker-devel-1.1.16-4.9.1 libpacemaker3-1.1.16-4.9.1 libpacemaker3-debuginfo-1.1.16-4.9.1 pacemaker-1.1.16-4.9.1 pacemaker-cli-1.1.16-4.9.1 pacemaker-cli-debuginfo-1.1.16-4.9.1 pacemaker-cts-1.1.16-4.9.1 pacemaker-cts-debuginfo-1.1.16-4.9.1 pacemaker-debuginfo-1.1.16-4.9.1 pacemaker-debugsource-1.1.16-4.9.1 pacemaker-remote-1.1.16-4.9.1 pacemaker-remote-debuginfo-1.1.16-4.9.1 References: https://bugzilla.suse.com/1117381 https://bugzilla.suse.com/1117934 https://bugzilla.suse.com/1128374 https://bugzilla.suse.com/1128772

1 0

openSUSE-RU-2019:1215-1: moderate: Recommended update for eric
by maintenance＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Recommended Update: Recommended update for eric ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1215-1 Rating: moderate References: #1099874 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for eric fixes the following issues: Eric was updated to 18.06. This provides a working Eric package to Leap 15.0. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1215=1 Package List: - openSUSE Leap 15.0 (noarch): eric-18.06-lp150.2.15 eric-api-18.06-lp150.2.15 References: https://bugzilla.suse.com/1099874

1 0

openSUSE-SU-2019:1216-1: moderate: Security update for gnuplot
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for gnuplot ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1216-1 Rating: moderate References: #1117463 #1117464 #1117465 Cross-References: CVE-2018-19490 CVE-2018-19491 CVE-2018-19492 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for gnuplot fixes the following issues: Security issues fixed: - CVE-2018-19492: Fixed a buffer overflow in cairotrm_options function (bsc#1117463) - CVE-2018-19491: Fixed a buffer overlow in the PS_options function (bsc#1117464) - CVE-2018-19490: Fixed a heap-based buffer overflow in the df_generate_ascii_array_entry function (bsc#1117465) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1216=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gnuplot-5.2.2-lp150.3.3.1 gnuplot-debuginfo-5.2.2-lp150.3.3.1 gnuplot-debugsource-5.2.2-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): gnuplot-doc-5.2.2-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19490.html https://www.suse.com/security/cve/CVE-2018-19491.html https://www.suse.com/security/cve/CVE-2018-19492.html https://bugzilla.suse.com/1117463 https://bugzilla.suse.com/1117464 https://bugzilla.suse.com/1117465

1 0

openSUSE-SU-2019:1217-1: important: Security update for openwsman
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1217-1 Rating: important References: #1092206 #1122623 Cross-References: CVE-2019-3816 CVE-2019-3833 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623). Other issues addressed: - Directory listing without authentication fixed (bsc#1092206). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1217=1 Package List: - openSUSE Leap 42.3 (x86_64): libwsman-devel-2.6.7-4.3.1 libwsman3-2.6.7-4.3.1 libwsman3-debuginfo-2.6.7-4.3.1 libwsman_clientpp-devel-2.6.7-4.3.1 libwsman_clientpp1-2.6.7-4.3.1 libwsman_clientpp1-debuginfo-2.6.7-4.3.1 openwsman-debugsource-2.6.7-4.3.1 openwsman-java-2.6.7-4.3.1 openwsman-perl-2.6.7-4.3.1 openwsman-perl-debuginfo-2.6.7-4.3.1 openwsman-python-2.6.7-4.3.1 openwsman-python-debuginfo-2.6.7-4.3.1 openwsman-ruby-2.6.7-4.3.1 openwsman-ruby-debuginfo-2.6.7-4.3.1 openwsman-ruby-docs-2.6.7-4.3.1 openwsman-server-2.6.7-4.3.1 openwsman-server-debuginfo-2.6.7-4.3.1 openwsman-server-plugin-ruby-2.6.7-4.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-4.3.1 winrs-2.6.7-4.3.1 References: https://www.suse.com/security/cve/CVE-2019-3816.html https://www.suse.com/security/cve/CVE-2019-3833.html https://bugzilla.suse.com/1092206 https://bugzilla.suse.com/1122623

1 0

openSUSE-SU-2019:1208-1: important: Security update for clamav
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1208-1 Rating: important References: #1130721 Cross-References: CVE-2019-1787 CVE-2019-1788 CVE-2019-1789 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for clamav to version 0.100.3 fixes the following issues: Security issues fixed (bsc#1130721): - CVE-2019-1787: Fixed an out-of-bounds heap read condition which may occur when scanning PDF documents. - CVE-2019-1789: Fixed an out-of-bounds heap read condition which may occur when scanning PE files (i.e. Windows EXE and DLL files). - CVE-2019-1788: Fixed an out-of-bounds heap write condition which may occur when scanning OLE2 files such as Microsoft Office 97-2003 documents. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1208=1 Package List: - openSUSE Leap 42.3 (x86_64): clamav-0.100.3-35.1 clamav-debuginfo-0.100.3-35.1 clamav-debugsource-0.100.3-35.1 References: https://www.suse.com/security/cve/CVE-2019-1787.html https://www.suse.com/security/cve/CVE-2019-1788.html https://www.suse.com/security/cve/CVE-2019-1789.html https://bugzilla.suse.com/1130721

1 0

openSUSE-RU-2019:1214-1: moderate: Recommended update for speech-dispatcher
by maintenance＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Recommended Update: Recommended update for speech-dispatcher ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1214-1 Rating: moderate References: #1129586 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for speech-dispatcher fixes the following issues: - set includedir to fix the entries in the pkg-config file (bsc#1129586) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1214=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libspeechd-devel-0.8.8-lp150.2.3.1 libspeechd2-0.8.8-lp150.2.3.1 libspeechd2-debuginfo-0.8.8-lp150.2.3.1 python3-speechd-0.8.8-lp150.2.3.1 speech-dispatcher-0.8.8-lp150.2.3.1 speech-dispatcher-configure-0.8.8-lp150.2.3.1 speech-dispatcher-debuginfo-0.8.8-lp150.2.3.1 speech-dispatcher-debugsource-0.8.8-lp150.2.3.1 speech-dispatcher-module-espeak-0.8.8-lp150.2.3.1 speech-dispatcher-module-espeak-debuginfo-0.8.8-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libspeechd2-32bit-0.8.8-lp150.2.3.1 libspeechd2-32bit-debuginfo-0.8.8-lp150.2.3.1 References: https://bugzilla.suse.com/1129586

1 0

openSUSE-SU-2019:1213-1: moderate: Security update for SDL
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for SDL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1213-1 Rating: moderate References: #1124799 #1124800 #1124802 #1124803 #1124805 #1124806 #1124824 #1124825 #1124826 #1124827 #1125099 Cross-References: CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1213=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): SDL-debugsource-1.2.15-20.3.1 libSDL-1_2-0-1.2.15-20.3.1 libSDL-1_2-0-debuginfo-1.2.15-20.3.1 libSDL-devel-1.2.15-20.3.1 - openSUSE Leap 42.3 (x86_64): libSDL-1_2-0-32bit-1.2.15-20.3.1 libSDL-1_2-0-debuginfo-32bit-1.2.15-20.3.1 libSDL-devel-32bit-1.2.15-20.3.1 References: https://www.suse.com/security/cve/CVE-2019-7572.html https://www.suse.com/security/cve/CVE-2019-7573.html https://www.suse.com/security/cve/CVE-2019-7574.html https://www.suse.com/security/cve/CVE-2019-7575.html https://www.suse.com/security/cve/CVE-2019-7576.html https://www.suse.com/security/cve/CVE-2019-7577.html https://www.suse.com/security/cve/CVE-2019-7578.html https://www.suse.com/security/cve/CVE-2019-7635.html https://www.suse.com/security/cve/CVE-2019-7636.html https://www.suse.com/security/cve/CVE-2019-7637.html https://www.suse.com/security/cve/CVE-2019-7638.html https://bugzilla.suse.com/1124799 https://bugzilla.suse.com/1124800 https://bugzilla.suse.com/1124802 https://bugzilla.suse.com/1124803 https://bugzilla.suse.com/1124805 https://bugzilla.suse.com/1124806 https://bugzilla.suse.com/1124824 https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1124826 https://bugzilla.suse.com/1124827 https://bugzilla.suse.com/1125099

1 0

openSUSE-SU-2019:1210-1: important: Security update for clamav
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for clamav ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1210-1 Rating: important References: #1130721 Cross-References: CVE-2019-1787 CVE-2019-1788 CVE-2019-1789 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for clamav to version 0.100.3 fixes the following issues: Security issues fixed (bsc#1130721): - CVE-2019-1787: Fixed an out-of-bounds heap read condition which may occur when scanning PDF documents. - CVE-2019-1789: Fixed an out-of-bounds heap read condition which may occur when scanning PE files (i.e. Windows EXE and DLL files). - CVE-2019-1788: Fixed an out-of-bounds heap write condition which may occur when scanning OLE2 files such as Microsoft Office 97-2003 documents. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1210=1 Package List: - openSUSE Leap 15.0 (x86_64): clamav-0.100.3-lp150.2.10.1 clamav-debuginfo-0.100.3-lp150.2.10.1 clamav-debugsource-0.100.3-lp150.2.10.1 clamav-devel-0.100.3-lp150.2.10.1 libclamav7-0.100.3-lp150.2.10.1 libclamav7-debuginfo-0.100.3-lp150.2.10.1 libclammspack0-0.100.3-lp150.2.10.1 libclammspack0-debuginfo-0.100.3-lp150.2.10.1 References: https://www.suse.com/security/cve/CVE-2019-1787.html https://www.suse.com/security/cve/CVE-2019-1788.html https://www.suse.com/security/cve/CVE-2019-1789.html https://bugzilla.suse.com/1130721

1 0

openSUSE-SU-2019:1209-1: important: Security update for apache2
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1209-1 Rating: important References: #1131233 #1131237 #1131239 #1131241 #1131245 Cross-References: CVE-2019-0196 CVE-2019-0197 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2 fixes the following issues: * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the server could have abused this issue to potentially gain super user privileges. [bsc#1131233] * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239] * CVE-2019-0197: When HTTP/2 support was enabled in the Apache server for a 'http' host or H2Upgrade was enabled for h2 on a 'https' host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. This issue could have been abused to mount a denial-of-service attack. Servers that never enabled the h2 protocol or that only enabled it for https: and did not configure the "H2Upgrade on" are unaffected. [bsc#1131245] * CVE-2019-0196: Through specially crafted network input the Apache's http/2 request handler could be lead to access previously freed memory while determining the method of a request. This resulted in the request being misclassified and thus being processed incorrectly. [bsc#1131237] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1209=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.17.1 apache2-debuginfo-2.4.33-lp150.2.17.1 apache2-debugsource-2.4.33-lp150.2.17.1 apache2-devel-2.4.33-lp150.2.17.1 apache2-event-2.4.33-lp150.2.17.1 apache2-event-debuginfo-2.4.33-lp150.2.17.1 apache2-example-pages-2.4.33-lp150.2.17.1 apache2-prefork-2.4.33-lp150.2.17.1 apache2-prefork-debuginfo-2.4.33-lp150.2.17.1 apache2-utils-2.4.33-lp150.2.17.1 apache2-utils-debuginfo-2.4.33-lp150.2.17.1 apache2-worker-2.4.33-lp150.2.17.1 apache2-worker-debuginfo-2.4.33-lp150.2.17.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.17.1 References: https://www.suse.com/security/cve/CVE-2019-0196.html https://www.suse.com/security/cve/CVE-2019-0197.html https://www.suse.com/security/cve/CVE-2019-0211.html https://www.suse.com/security/cve/CVE-2019-0217.html https://www.suse.com/security/cve/CVE-2019-0220.html https://bugzilla.suse.com/1131233 https://bugzilla.suse.com/1131237 https://bugzilla.suse.com/1131239 https://bugzilla.suse.com/1131241 https://bugzilla.suse.com/1131245

1 0

openSUSE-SU-2019:1212-1: moderate: Security update for dovecot23
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1212-1 Rating: moderate References: #1130116 Cross-References: CVE-2019-7524 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot23 fixes the following issue: Security issue fixed: - CVE-2019-7524: Fixed an improper file handling which could result in stack oveflow allowing local root escalation (bsc#1130116). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1212=1 Package List: - openSUSE Leap 15.0 (x86_64): dovecot23-2.3.3-lp150.8.2 dovecot23-backend-mysql-2.3.3-lp150.8.2 dovecot23-backend-mysql-debuginfo-2.3.3-lp150.8.2 dovecot23-backend-pgsql-2.3.3-lp150.8.2 dovecot23-backend-pgsql-debuginfo-2.3.3-lp150.8.2 dovecot23-backend-sqlite-2.3.3-lp150.8.2 dovecot23-backend-sqlite-debuginfo-2.3.3-lp150.8.2 dovecot23-debuginfo-2.3.3-lp150.8.2 dovecot23-debugsource-2.3.3-lp150.8.2 dovecot23-devel-2.3.3-lp150.8.2 dovecot23-fts-2.3.3-lp150.8.2 dovecot23-fts-debuginfo-2.3.3-lp150.8.2 dovecot23-fts-lucene-2.3.3-lp150.8.2 dovecot23-fts-lucene-debuginfo-2.3.3-lp150.8.2 dovecot23-fts-solr-2.3.3-lp150.8.2 dovecot23-fts-solr-debuginfo-2.3.3-lp150.8.2 dovecot23-fts-squat-2.3.3-lp150.8.2 dovecot23-fts-squat-debuginfo-2.3.3-lp150.8.2 References: https://www.suse.com/security/cve/CVE-2019-7524.html https://bugzilla.suse.com/1130116

1 0

openSUSE-SU-2019:1211-1: moderate: Security update for nodejs10
by opensuse-security＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Security Update: Security update for nodejs10 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1211-1 Rating: moderate References: #1127532 Cross-References: CVE-2019-5737 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for nodejs10 to version 10.1.2 fixes the following issue: Security issue fixed: - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127532). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1211=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs10-10.15.2-5.2 nodejs10-debuginfo-10.15.2-5.2 nodejs10-debugsource-10.15.2-5.2 nodejs10-devel-10.15.2-5.2 npm10-10.15.2-5.2 - openSUSE Leap 42.3 (noarch): nodejs10-docs-10.15.2-5.2 References: https://www.suse.com/security/cve/CVE-2019-5737.html https://bugzilla.suse.com/1127532

1 0

openSUSE-RU-2019:1207-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 16 Apr '19

16 Apr '19

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1207-1 Rating: moderate References: #1124435 #1125897 #1128407 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for openvswitch fixes the following issues: Various upstream fixes were backported to improve stability (bsc#1128407) Additional fixes: - Obsolete old python[2]-openvswitch-test subpackages (bsc#1124435) - Add extra openvswitch headers (bsc#1125897) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1207=1 Package List: - openSUSE Leap 15.0 (noarch): openvswitch-doc-2.8.5-lp150.5.11.1 - openSUSE Leap 15.0 (x86_64): libopenvswitch-2_8-0-2.8.5-lp150.5.11.1 libopenvswitch-2_8-0-debuginfo-2.8.5-lp150.5.11.1 openvswitch-2.8.5-lp150.5.11.1 openvswitch-debuginfo-2.8.5-lp150.5.11.1 openvswitch-debugsource-2.8.5-lp150.5.11.1 openvswitch-devel-2.8.5-lp150.5.11.1 openvswitch-ovn-central-2.8.5-lp150.5.11.1 openvswitch-ovn-central-debuginfo-2.8.5-lp150.5.11.1 openvswitch-ovn-common-2.8.5-lp150.5.11.1 openvswitch-ovn-common-debuginfo-2.8.5-lp150.5.11.1 openvswitch-ovn-docker-2.8.5-lp150.5.11.1 openvswitch-ovn-host-2.8.5-lp150.5.11.1 openvswitch-ovn-host-debuginfo-2.8.5-lp150.5.11.1 openvswitch-ovn-vtep-2.8.5-lp150.5.11.1 openvswitch-ovn-vtep-debuginfo-2.8.5-lp150.5.11.1 openvswitch-pki-2.8.5-lp150.5.11.1 openvswitch-test-2.8.5-lp150.5.11.1 openvswitch-test-debuginfo-2.8.5-lp150.5.11.1 openvswitch-vtep-2.8.5-lp150.5.11.1 openvswitch-vtep-debuginfo-2.8.5-lp150.5.11.1 python2-ovs-2.8.5-lp150.5.11.1 python2-ovs-debuginfo-2.8.5-lp150.5.11.1 python3-ovs-2.8.5-lp150.5.11.1 python3-ovs-debuginfo-2.8.5-lp150.5.11.1 References: https://bugzilla.suse.com/1124435 https://bugzilla.suse.com/1125897 https://bugzilla.suse.com/1128407

1 0

openSUSE-SU-2019:1206-1: moderate: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 15 Apr '19

15 Apr '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1206-1 Rating: moderate References: #1126768 Cross-References: CVE-2019-8375 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 to version 2.24.0 fixes the following issue: Security issue fixed: - CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact (bsc#1126768). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1206=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.24.0-lp150.2.16.1 libjavascriptcoregtk-4_0-18-debuginfo-2.24.0-lp150.2.16.1 libwebkit2gtk-4_0-37-2.24.0-lp150.2.16.1 libwebkit2gtk-4_0-37-debuginfo-2.24.0-lp150.2.16.1 typelib-1_0-JavaScriptCore-4_0-2.24.0-lp150.2.16.1 typelib-1_0-WebKit2-4_0-2.24.0-lp150.2.16.1 typelib-1_0-WebKit2WebExtension-4_0-2.24.0-lp150.2.16.1 webkit-jsc-4-2.24.0-lp150.2.16.1 webkit-jsc-4-debuginfo-2.24.0-lp150.2.16.1 webkit2gtk-4_0-injected-bundles-2.24.0-lp150.2.16.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.24.0-lp150.2.16.1 webkit2gtk3-debugsource-2.24.0-lp150.2.16.1 webkit2gtk3-devel-2.24.0-lp150.2.16.1 webkit2gtk3-minibrowser-2.24.0-lp150.2.16.1 webkit2gtk3-minibrowser-debuginfo-2.24.0-lp150.2.16.1 webkit2gtk3-plugin-process-gtk2-2.24.0-lp150.2.16.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.24.0-lp150.2.16.1 - openSUSE Leap 15.0 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.24.0-lp150.2.16.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.24.0-lp150.2.16.1 libwebkit2gtk-4_0-37-32bit-2.24.0-lp150.2.16.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.24.0-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): libwebkit2gtk3-lang-2.24.0-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-8375.html https://bugzilla.suse.com/1126768

1 0

openSUSE-RU-2019:1205-1: moderate: Recommended update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5
by maintenance＠opensuse.org 15 Apr '19

15 Apr '19

openSUSE Recommended Update: Recommended update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1205-1 Rating: moderate References: #1108019 #1130883 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5 fixes the following issues: KDE Plasma was updated to 5.12.8. For more details please see: * https://www.kde.org/announcements/plasma-5.12.8.php Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1205=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libKF5Screen7-5.12.8-lp150.2.3.1 libKF5Screen7-debuginfo-5.12.8-lp150.2.3.1 libkscreen2-debugsource-5.12.8-lp150.2.3.1 libkscreen2-devel-5.12.8-lp150.2.3.1 libkscreen2-plugin-5.12.8-lp150.2.3.1 libkscreen2-plugin-debuginfo-5.12.8-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): breeze-5.12.8-lp150.2.3.1 breeze-debuginfo-5.12.8-lp150.2.3.1 breeze-debugsource-5.12.8-lp150.2.3.1 breeze4-style-5.12.8-lp150.2.3.1 breeze4-style-debuginfo-5.12.8-lp150.2.3.1 breeze4-style-debugsource-5.12.8-lp150.2.3.1 breeze5-decoration-5.12.8-lp150.2.3.1 breeze5-decoration-debuginfo-5.12.8-lp150.2.3.1 breeze5-style-5.12.8-lp150.2.3.1 breeze5-style-debuginfo-5.12.8-lp150.2.3.1 discover-5.12.8-lp150.7.1 discover-debuginfo-5.12.8-lp150.7.1 discover-debugsource-5.12.8-lp150.7.1 discover-plasmoid-5.12.8-lp150.7.1 discover-plasmoid-debuginfo-5.12.8-lp150.7.1 drkonqi5-5.12.8-lp150.2.3.1 drkonqi5-debuginfo-5.12.8-lp150.2.3.1 drkonqi5-debugsource-5.12.8-lp150.2.3.1 kcm_sddm-5.12.8-lp150.3.3.1 kcm_sddm-debuginfo-5.12.8-lp150.3.3.1 kcm_sddm-debugsource-5.12.8-lp150.3.3.1 kinfocenter5-5.12.8-lp150.8.1 kinfocenter5-debuginfo-5.12.8-lp150.8.1 kinfocenter5-debugsource-5.12.8-lp150.8.1 kscreen5-5.12.8-lp150.7.1 kscreen5-debuginfo-5.12.8-lp150.7.1 kscreen5-debugsource-5.12.8-lp150.7.1 kscreenlocker-5.12.8-lp150.7.1 kscreenlocker-debuginfo-5.12.8-lp150.7.1 kscreenlocker-debugsource-5.12.8-lp150.7.1 kscreenlocker-devel-5.12.8-lp150.7.1 kwin5-5.12.8-lp150.10.1 kwin5-debuginfo-5.12.8-lp150.10.1 kwin5-debugsource-5.12.8-lp150.10.1 kwin5-devel-5.12.8-lp150.10.1 libKF5Screen7-32bit-5.12.8-lp150.2.3.1 libKF5Screen7-32bit-debuginfo-5.12.8-lp150.2.3.1 libKScreenLocker5-5.12.8-lp150.7.1 libKScreenLocker5-debuginfo-5.12.8-lp150.7.1 libkscreen2-devel-32bit-5.12.8-lp150.2.3.1 libkscreen2-plugin-32bit-5.12.8-lp150.2.3.1 libkscreen2-plugin-32bit-debuginfo-5.12.8-lp150.2.3.1 plasma-nm5-5.12.8-lp150.8.1 plasma-nm5-debuginfo-5.12.8-lp150.8.1 plasma-nm5-debugsource-5.12.8-lp150.8.1 plasma-nm5-fortisslvpn-5.12.8-lp150.8.1 plasma-nm5-fortisslvpn-debuginfo-5.12.8-lp150.8.1 plasma-nm5-iodine-5.12.8-lp150.8.1 plasma-nm5-iodine-debuginfo-5.12.8-lp150.8.1 plasma-nm5-l2tp-5.12.8-lp150.8.1 plasma-nm5-l2tp-debuginfo-5.12.8-lp150.8.1 plasma-nm5-openconnect-5.12.8-lp150.8.1 plasma-nm5-openconnect-debuginfo-5.12.8-lp150.8.1 plasma-nm5-openswan-5.12.8-lp150.8.1 plasma-nm5-openswan-debuginfo-5.12.8-lp150.8.1 plasma-nm5-openvpn-5.12.8-lp150.8.1 plasma-nm5-openvpn-debuginfo-5.12.8-lp150.8.1 plasma-nm5-pptp-5.12.8-lp150.8.1 plasma-nm5-pptp-debuginfo-5.12.8-lp150.8.1 plasma-nm5-ssh-5.12.8-lp150.8.1 plasma-nm5-ssh-debuginfo-5.12.8-lp150.8.1 plasma-nm5-sstp-5.12.8-lp150.8.1 plasma-nm5-sstp-debuginfo-5.12.8-lp150.8.1 plasma-nm5-strongswan-5.12.8-lp150.8.1 plasma-nm5-strongswan-debuginfo-5.12.8-lp150.8.1 plasma-nm5-vpnc-5.12.8-lp150.8.1 plasma-nm5-vpnc-debuginfo-5.12.8-lp150.8.1 plasma-vault-5.12.8-lp150.2.3.1 plasma-vault-backend-cryfs-5.12.8-lp150.2.3.1 plasma-vault-backend-encfs-5.12.8-lp150.2.3.1 plasma-vault-debuginfo-5.12.8-lp150.2.3.1 plasma-vault-debugsource-5.12.8-lp150.2.3.1 plasma5-addons-5.12.8-lp150.7.1 plasma5-addons-debuginfo-5.12.8-lp150.7.1 plasma5-addons-debugsource-5.12.8-lp150.7.1 plasma5-desktop-5.12.8-lp150.8.1 plasma5-desktop-debuginfo-5.12.8-lp150.8.1 plasma5-desktop-debugsource-5.12.8-lp150.8.1 plasma5-sdk-5.12.8-lp150.2.3.1 plasma5-sdk-debuginfo-5.12.8-lp150.2.3.1 plasma5-sdk-debugsource-5.12.8-lp150.2.3.1 plasma5-workspace-5.12.8-lp150.7.1 plasma5-workspace-debuginfo-5.12.8-lp150.7.1 plasma5-workspace-debugsource-5.12.8-lp150.7.1 plasma5-workspace-devel-5.12.8-lp150.7.1 plasma5-workspace-libs-5.12.8-lp150.7.1 plasma5-workspace-libs-debuginfo-5.12.8-lp150.7.1 plasmaengineexplorer5-5.12.8-lp150.2.3.1 plasmaengineexplorer5-debuginfo-5.12.8-lp150.2.3.1 polkit-kde-agent-5-5.12.8-lp150.2.3.1 polkit-kde-agent-5-debuginfo-5.12.8-lp150.2.3.1 polkit-kde-agent-5-debugsource-5.12.8-lp150.2.3.1 systemsettings5-5.12.8-lp150.2.3.1 systemsettings5-debuginfo-5.12.8-lp150.2.3.1 systemsettings5-debugsource-5.12.8-lp150.2.3.1 systemsettings5-devel-5.12.8-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): breeze5-cursors-5.12.8-lp150.2.3.1 breeze5-style-lang-5.12.8-lp150.2.3.1 breeze5-wallpapers-5.12.8-lp150.2.3.1 discover-lang-5.12.8-lp150.7.1 drkonqi5-lang-5.12.8-lp150.2.3.1 kcm_sddm-lang-5.12.8-lp150.3.3.1 kinfocenter5-lang-5.12.8-lp150.8.1 kscreen5-lang-5.12.8-lp150.7.1 kscreenlocker-lang-5.12.8-lp150.7.1 kwin5-lang-5.12.8-lp150.10.1 plasma-nm5-lang-5.12.8-lp150.8.1 plasma-vault-lang-5.12.8-lp150.2.3.1 plasma5-addons-lang-5.12.8-lp150.7.1 plasma5-desktop-lang-5.12.8-lp150.8.1 plasma5-sdk-lang-5.12.8-lp150.2.3.1 plasma5-session-5.12.8-lp150.7.1 plasma5-session-wayland-5.12.8-lp150.7.1 plasma5-workspace-lang-5.12.8-lp150.7.1 polkit-kde-agent-5-lang-5.12.8-lp150.2.3.1 systemsettings5-lang-5.12.8-lp150.2.3.1 References: https://bugzilla.suse.com/1108019 https://bugzilla.suse.com/1130883

1 0

openSUSE-RU-2019:1204-1: moderate: Recommended update for rpm
by maintenance＠opensuse.org 14 Apr '19

14 Apr '19

openSUSE Recommended Update: Recommended update for rpm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1204-1 Rating: moderate References: #1119414 #1126327 #1129753 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for rpm fixes the following issues: - This update shortens RPM changelog to after a certain cut off date (bsc#1129753) - Translate dashes to underscores in kmod provides (FATE#326579, jsc#SLE-4117, jsc#SLE-3853, bsc#1119414). - Re-add symset-table from SLE 12 (bsc#1126327). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1204=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rpm-4.14.1-lp150.9.13.1 rpm-build-4.14.1-lp150.9.13.1 rpm-build-debuginfo-4.14.1-lp150.9.13.1 rpm-debuginfo-4.14.1-lp150.9.13.1 rpm-debugsource-4.14.1-lp150.9.13.1 rpm-devel-4.14.1-lp150.9.13.1 - openSUSE Leap 15.0 (x86_64): rpm-32bit-4.14.1-lp150.9.13.1 rpm-32bit-debuginfo-4.14.1-lp150.9.13.1 References: https://bugzilla.suse.com/1119414 https://bugzilla.suse.com/1126327 https://bugzilla.suse.com/1129753

1 0

openSUSE-RU-2019:1203-1: moderate: Recommended update for cups
by maintenance＠opensuse.org 14 Apr '19

14 Apr '19

openSUSE Recommended Update: Recommended update for cups ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1203-1 Rating: moderate References: #1118118 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cups fixes the following issues: - Fixed validation of UTF-8 filenames to avoid crashes (bsc#1118118) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1203=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cups-2.2.7-lp150.2.10.2 cups-client-2.2.7-lp150.2.10.2 cups-client-debuginfo-2.2.7-lp150.2.10.2 cups-config-2.2.7-lp150.2.10.2 cups-ddk-2.2.7-lp150.2.10.2 cups-ddk-debuginfo-2.2.7-lp150.2.10.2 cups-debuginfo-2.2.7-lp150.2.10.2 cups-debugsource-2.2.7-lp150.2.10.2 cups-devel-2.2.7-lp150.2.10.2 libcups2-2.2.7-lp150.2.10.2 libcups2-debuginfo-2.2.7-lp150.2.10.2 libcupscgi1-2.2.7-lp150.2.10.2 libcupscgi1-debuginfo-2.2.7-lp150.2.10.2 libcupsimage2-2.2.7-lp150.2.10.2 libcupsimage2-debuginfo-2.2.7-lp150.2.10.2 libcupsmime1-2.2.7-lp150.2.10.2 libcupsmime1-debuginfo-2.2.7-lp150.2.10.2 libcupsppdc1-2.2.7-lp150.2.10.2 libcupsppdc1-debuginfo-2.2.7-lp150.2.10.2 - openSUSE Leap 15.0 (x86_64): cups-devel-32bit-2.2.7-lp150.2.10.2 libcups2-32bit-2.2.7-lp150.2.10.2 libcups2-32bit-debuginfo-2.2.7-lp150.2.10.2 libcupscgi1-32bit-2.2.7-lp150.2.10.2 libcupscgi1-32bit-debuginfo-2.2.7-lp150.2.10.2 libcupsimage2-32bit-2.2.7-lp150.2.10.2 libcupsimage2-32bit-debuginfo-2.2.7-lp150.2.10.2 libcupsmime1-32bit-2.2.7-lp150.2.10.2 libcupsmime1-32bit-debuginfo-2.2.7-lp150.2.10.2 libcupsppdc1-32bit-2.2.7-lp150.2.10.2 libcupsppdc1-32bit-debuginfo-2.2.7-lp150.2.10.2 References: https://bugzilla.suse.com/1118118

1 0

openSUSE-RU-2019:1202-1: moderate: Recommended update for gcc
by maintenance＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Recommended Update: Recommended update for gcc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1202-1 Rating: moderate References: #1096008 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gcc fixes the following issues: - Fix gcc-PIE spec to properly honor -no-pie at link time. (bsc#1096008) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1202=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cpp-7-lp150.2.3.1 gcc-7-lp150.2.3.1 gcc-PIE-7-lp150.2.3.1 gcc-ada-7-lp150.2.3.1 gcc-c++-7-lp150.2.3.1 gcc-fortran-7-lp150.2.3.1 gcc-go-7-lp150.2.3.1 gcc-info-7-lp150.2.3.1 gcc-locale-7-lp150.2.3.1 gcc-obj-c++-7-lp150.2.3.1 gcc-objc-7-lp150.2.3.1 libstdc++-devel-7-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): gcc-32bit-7-lp150.2.3.1 gcc-ada-32bit-7-lp150.2.3.1 gcc-c++-32bit-7-lp150.2.3.1 gcc-fortran-32bit-7-lp150.2.3.1 gcc-go-32bit-7-lp150.2.3.1 gcc-objc-32bit-7-lp150.2.3.1 libstdc++-devel-32bit-7-lp150.2.3.1 References: https://bugzilla.suse.com/1096008

1 0

openSUSE-RU-2019:1201-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1201-1 Rating: moderate References: #1113702 #1122569 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fixed regression of crashing lvm on multipath SAN (bsc#1113702) - Add exception handling to FCP lun enumeration (bsc#1113702) - Fix LOADER_TYPE parsing in grub2-once (bsc#1122569) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1201=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): grub2-2.02-lp150.13.20.2 grub2-branding-upstream-2.02-lp150.13.20.2 grub2-debuginfo-2.02-lp150.13.20.2 grub2-debugsource-2.02-lp150.13.20.2 grub2-i386-pc-2.02-lp150.13.20.2 - openSUSE Leap 15.0 (noarch): grub2-snapper-plugin-2.02-lp150.13.20.2 grub2-systemd-sleep-plugin-2.02-lp150.13.20.2 - openSUSE Leap 15.0 (x86_64): grub2-x86_64-efi-2.02-lp150.13.20.2 grub2-x86_64-xen-2.02-lp150.13.20.2 - openSUSE Leap 15.0 (i586): grub2-i386-efi-2.02-lp150.13.20.2 grub2-i386-xen-2.02-lp150.13.20.2 References: https://bugzilla.suse.com/1113702 https://bugzilla.suse.com/1122569

1 0

openSUSE-SU-2019:1199-1: important: Recommended update for xen
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Recommended update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1199-1 Rating: important References: #1026236 #1027519 #1114988 #1126140 #1126141 #1126192 #1126195 #1126196 #1126197 #1126198 #1126201 #1126325 #1127400 #1127620 Cross-References: CVE-2018-19967 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 13 fixes is now available. Description: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service (DoS). (XSA-282) (bsc#1114988) - Fixed an issue which could allow malicious PV guests may cause a host crash or gain access to data pertaining to other guests.Additionally, vulnerable configurations are likely to be unstable even in the absence of an attack (bsc#1126198). - Fixed multiple access violations introduced by XENMEM_exchange hypercall which could allow a single PV guest to leak arbitrary amounts of memory, leading to a denial of service (bsc#1126192). - Fixed an issue which could allow a malicious unprivileged guest userspace process to escalate its privilege to that of other userspace processes in the same guest and potentially thereby to that of the guest operating system (bsc#1126201). - Fixed an issue which could allow malicious or buggy x86 PV guest kernels to mount a Denial of Service attack affecting the whole system (bsc#1126197). - Fixed an issue which could allow an untrusted PV domain with access to a physical device to DMA into its own pagetables leading to privilege escalation (bsc#1126195). - Fixed an issue which could allow a malicious or buggy x86 PV guest kernels can mount a Denial of Service attack affecting the whole system (bsc#1126196). - Fixed an issue which could allow malicious 64bit PV guests to cause a host crash (bsc#1127400). - Fixed an issue which could allow malicious or buggy guests with passed through PCI devices to be able to escalate their privileges, crash the host, or access data belonging to other guests. Additionally memory leaks were also possible (bsc#1126140). - Fixed a race condition issue which could allow malicious PV guests to escalate their privilege to that of the hypervisor (bsc#1126141). Other issues fixed: - Upstream bug fixes (bsc#1027519) - Fixed an issue where setup of grant_tables and other variables may fail (bsc#1126325). - Added a requirement for xen, xl.cfg firmware="pvgrub32|pvgrub64 (bsc#1127620). - Added Xen cmdline option "suse_vtsc_tolerance" to avoid TSC emulation for HVM domUs (bsc#1026236). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1199=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): xen-debugsource-4.10.3_02-lp150.2.16.1 xen-devel-4.10.3_02-lp150.2.16.1 xen-libs-4.10.3_02-lp150.2.16.1 xen-libs-debuginfo-4.10.3_02-lp150.2.16.1 xen-tools-domU-4.10.3_02-lp150.2.16.1 xen-tools-domU-debuginfo-4.10.3_02-lp150.2.16.1 - openSUSE Leap 15.0 (x86_64): xen-4.10.3_02-lp150.2.16.1 xen-doc-html-4.10.3_02-lp150.2.16.1 xen-libs-32bit-4.10.3_02-lp150.2.16.1 xen-libs-32bit-debuginfo-4.10.3_02-lp150.2.16.1 xen-tools-4.10.3_02-lp150.2.16.1 xen-tools-debuginfo-4.10.3_02-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2018-19967.html https://bugzilla.suse.com/1026236 https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1114988 https://bugzilla.suse.com/1126140 https://bugzilla.suse.com/1126141 https://bugzilla.suse.com/1126192 https://bugzilla.suse.com/1126195 https://bugzilla.suse.com/1126196 https://bugzilla.suse.com/1126197 https://bugzilla.suse.com/1126198 https://bugzilla.suse.com/1126201 https://bugzilla.suse.com/1126325 https://bugzilla.suse.com/1127400 https://bugzilla.suse.com/1127620

1 0

openSUSE-SU-2019:1200-1: moderate: Security update for netpbm
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Security update for netpbm ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1200-1 Rating: moderate References: #1086777 Cross-References: CVE-2018-8975 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for netpbm fixes the following issues: - CVE-2018-8975: The pm_mallocarray2 function allowed remote attackers to cause a denial of service (heap-based buffer over-read) via a crafted image file (bsc#1086777). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1200=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libnetpbm-devel-10.80.1-lp150.2.3.1 libnetpbm11-10.80.1-lp150.2.3.1 libnetpbm11-debuginfo-10.80.1-lp150.2.3.1 netpbm-10.80.1-lp150.2.3.1 netpbm-debuginfo-10.80.1-lp150.2.3.1 netpbm-debugsource-10.80.1-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libnetpbm11-32bit-10.80.1-lp150.2.3.1 libnetpbm11-32bit-debuginfo-10.80.1-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-8975.html https://bugzilla.suse.com/1086777

1 0

openSUSE-SU-2019:1196-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1196-1 Rating: moderate References: #1120653 #1120654 #1120656 #1120659 #1124341 #1124342 Cross-References: CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880 CVE-2019-1000019 CVE-2019-1000020 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for libarchive fixes the following issues: Security issues fixed: - CVE-2018-1000877: Fixed a double free vulnerability in RAR decoder (bsc#1120653) - CVE-2018-1000878: Fixed a Use-After-Free vulnerability in RAR decoder (bsc#1120654) - CVE-2018-1000879: Fixed a NULL Pointer Dereference vulnerability in ACL parser (bsc#1120656) - CVE-2018-1000880: Fixed an Improper Input Validation vulnerability in WARC parser (bsc#1120659) - CVE-2019-1000019: Fixed an Out-Of-Bounds Read vulnerability in 7zip decompression (bsc#1124341) - CVE-2019-1000020: Fixed an Infinite Loop vulnerability in ISO9660 parser (bsc#1124342) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1196=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bsdtar-3.3.2-lp150.7.1 bsdtar-debuginfo-3.3.2-lp150.7.1 libarchive-debugsource-3.3.2-lp150.7.1 libarchive-devel-3.3.2-lp150.7.1 libarchive13-3.3.2-lp150.7.1 libarchive13-debuginfo-3.3.2-lp150.7.1 - openSUSE Leap 15.0 (x86_64): libarchive13-32bit-3.3.2-lp150.7.1 libarchive13-32bit-debuginfo-3.3.2-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-1000877.html https://www.suse.com/security/cve/CVE-2018-1000878.html https://www.suse.com/security/cve/CVE-2018-1000879.html https://www.suse.com/security/cve/CVE-2018-1000880.html https://www.suse.com/security/cve/CVE-2019-1000019.html https://www.suse.com/security/cve/CVE-2019-1000020.html https://bugzilla.suse.com/1120653 https://bugzilla.suse.com/1120654 https://bugzilla.suse.com/1120656 https://bugzilla.suse.com/1120659 https://bugzilla.suse.com/1124341 https://bugzilla.suse.com/1124342

1 0

openSUSE-SU-2019:1198-1: moderate: Security update for bluez
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Security update for bluez ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1198-1 Rating: moderate References: #1015173 Cross-References: CVE-2016-9918 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bluez fixes the following issues: Security issue fixed: - CVE-2016-9918: Fixed a out-of-bound read in the packet_hexdump function (bsc#1015173) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1198=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): bluez-5.48-lp150.4.10.1 bluez-cups-5.48-lp150.4.10.1 bluez-cups-debuginfo-5.48-lp150.4.10.1 bluez-debuginfo-5.48-lp150.4.10.1 bluez-debugsource-5.48-lp150.4.10.1 bluez-devel-5.48-lp150.4.10.1 bluez-test-5.48-lp150.4.10.1 bluez-test-debuginfo-5.48-lp150.4.10.1 libbluetooth3-5.48-lp150.4.10.1 libbluetooth3-debuginfo-5.48-lp150.4.10.1 - openSUSE Leap 15.0 (noarch): bluez-auto-enable-devices-5.48-lp150.4.10.1 - openSUSE Leap 15.0 (x86_64): bluez-devel-32bit-5.48-lp150.4.10.1 libbluetooth3-32bit-5.48-lp150.4.10.1 libbluetooth3-32bit-debuginfo-5.48-lp150.4.10.1 References: https://www.suse.com/security/cve/CVE-2016-9918.html https://bugzilla.suse.com/1015173

1 0

openSUSE-SU-2019:1197-1: moderate: Security update for file
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Security update for file ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1197-1 Rating: moderate References: #1096974 #1096984 #1126117 #1126118 #1126119 Cross-References: CVE-2018-10360 CVE-2019-8905 CVE-2019-8906 CVE-2019-8907 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for file fixes the following issues: The following security vulnerabilities were addressed: - Fixed an out-of-bounds read in the function do_core_note in readelf.c, which allowed remote attackers to cause a denial of service (application crash) via a crafted ELF file (bsc#1096974 CVE-2018-10360). - CVE-2019-8905: Fixed a stack-based buffer over-read in do_core_note in readelf.c (bsc#1126118) - CVE-2019-8906: Fixed an out-of-bounds read in do_core_note in readelf. c (bsc#1126119) - CVE-2019-8907: Fixed a stack corruption in do_core_note in readelf.c (bsc#1126117) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1197=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): file-5.22-16.1 file-debuginfo-5.22-16.1 file-debugsource-5.22-16.1 file-devel-5.22-16.1 file-magic-5.22-16.1 libmagic1-5.22-16.1 libmagic1-debuginfo-5.22-16.1 python-magic-5.22-16.1 - openSUSE Leap 42.3 (x86_64): libmagic1-32bit-5.22-16.1 libmagic1-debuginfo-32bit-5.22-16.1 References: https://www.suse.com/security/cve/CVE-2018-10360.html https://www.suse.com/security/cve/CVE-2019-8905.html https://www.suse.com/security/cve/CVE-2019-8906.html https://www.suse.com/security/cve/CVE-2019-8907.html https://bugzilla.suse.com/1096974 https://bugzilla.suse.com/1096984 https://bugzilla.suse.com/1126117 https://bugzilla.suse.com/1126118 https://bugzilla.suse.com/1126119

1 0

openSUSE-SU-2019:1193-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1193-1 Rating: important References: #1046305 #1046306 #1050549 #1051510 #1056787 #1060463 #1063638 #1065600 #1070995 #1071995 #1078355 #1082943 #1083548 #1083647 #1086095 #1086282 #1088133 #1094244 #1094555 #1098995 #1100132 #1103429 #1106811 #1107078 #1107665 #1108101 #1110096 #1113042 #1113399 #1113722 #1113939 #1114279 #1114585 #1117108 #1117645 #1119019 #1119086 #1119843 #1120008 #1120601 #1120854 #1120902 #1120909 #1121317 #1121789 #1121805 #1122192 #1122764 #1122822 #1122982 #1123060 #1123061 #1123105 #1123161 #1123456 #1123882 #1124055 #1124235 #1124974 #1124975 #1124976 #1124978 #1124979 #1124980 #1124981 #1124982 #1124984 #1125125 #1125252 #1125315 #1125342 #1125614 #1125728 #1125780 #1125797 #1125799 #1125800 #1125907 #1125947 #1126131 #1126209 #1126356 #1126389 #1126393 #1126476 #1126480 #1126481 #1126488 #1126495 #1126555 #1126579 #1126740 #1126789 #1126790 #1126802 #1126803 #1126804 #1126805 #1126806 #1126807 #1127042 #1127062 #1127082 #1127154 #1127285 #1127286 #1127307 #1127363 #1127378 #1127445 #1127493 #1127494 #1127495 #1127496 #1127497 #1127498 #1127534 #1127561 #1127567 #1127595 #1127603 #1127682 #1127731 #1127750 #1127836 #1127961 #1128094 #1128166 #1128351 #1128451 #1128895 #1129046 #1129080 #1129163 #1129179 #1129181 #1129182 #1129183 #1129184 #1129205 #1129276 #1129281 #1129284 #1129285 #1129291 #1129292 #1129293 #1129294 #1129295 #1129296 #1129326 #1129327 #1129330 #1129363 #1129366 #1129497 #1129519 #1129543 #1129547 #1129551 #1129581 #1129625 #1129664 #1129739 #1129770 #1129923 #1130130 #1130154 #1130335 #1130336 #1130337 #1130338 #1130425 #1130427 #1130518 #1131062 #824948 Cross-References: CVE-2019-2024 CVE-2019-3819 CVE-2019-7308 CVE-2019-8912 CVE-2019-8980 CVE-2019-9213 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 6 vulnerabilities and has 171 fixes is now available. Description: The openSUSE Leap 15.0 was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179). - CVE-2019-3819: A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Versions from v4.18 and newer are vulnerable (bnc#1123161). - CVE-2019-7308: kernel/bpf/verifier.c performed undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks (bnc#1124055). - CVE-2019-8912: af_alg_release() in crypto/af_alg.c neglected to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr (bnc#1125907). - CVE-2019-8980: A memory leak in the kernel_read_file function in fs/exec.c allowed attackers to cause a denial of service (memory consumption) by triggering vfs_read failures (bnc#1126209). - CVE-2019-9213: expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bnc#1128166). The following non-security bugs were fixed: - 9p/net: fix memory leak in p9_client_create (bsc#1051510). - 9p: use inode->i_lock to protect i_size_write() under 32-bit (bsc#1051510). - acpi: acpi_pad: Do not launch acpi_pad threads on idle cpus (bsc#1113399). - acpi/APEI: Clear GHES block_status before panic() (bsc#1051510). - acpi/device_sysfs: Avoid OF modalias creation for removed device (bsc#1051510). - acpi/nfit: Fix bus command validation (bsc#1051510). - acpi: NUMA: Use correct type for printing addresses on i386-PAE (bsc#1051510). - acpi / video: Extend chassis-type detection with a "Lunch Box" check (bsc#1051510). - acpi / video: Refactor and fix dmi_is_desktop() (bsc#1051510). - alsa: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 (bsc#1051510). - alsa: compress: prevent potential divide by zero bugs (bsc#1051510). - alsa: echoaudio: add a check for ioremap_nocache (bsc#1051510). - alsa: firewire: add const qualifier to identifiers for read-only symbols (bsc#1051510). - alsa: firewire-motu: add a flag for AES/EBU on XLR interface (bsc#1051510). - alsa: firewire-motu: add specification flag for position of flag for MIDI messages (bsc#1051510). - alsa: firewire-motu: add support for MOTU Audio Express (bsc#1051510). - alsa: firewire-motu: add support for Motu Traveler (bsc#1051510). - alsa: firewire-motu: fix construction of PCM frame for capture direction (bsc#1051510). - alsa: firewire-motu: use 'version' field of unit directory to identify model (bsc#1051510). - alsa: hda - add Lenovo IdeaCentre B550 to the power_save_blacklist (bsc#1051510). - alsa: hda - Add quirk for HP EliteBook 840 G5 (bsc#1051510). - alsa: hda - Enforces runtime_resume after S3 and S4 for each codec (bsc#1051510). - alsa: hda/realtek - Add support for Acer Aspire E5-523G/ES1-432 headset mic (bsc#1051510). - alsa: hda/realtek: Disable PC beep in passthrough on alc285 (bsc#1051510). - alsa: hda/realtek: Enable ASUS X441MB and X705FD headset MIC with ALC256 (bsc#1051510). - alsa: hda/realtek: Enable audio jacks of ASUS UX362FA with ALC294 (bsc#1051510). - alsa: hda/realtek: Enable headset MIC of Acer AIO with ALC286 (bsc#1051510). - alsa: hda/realtek: Enable headset MIC of Acer Aspire Z24-890 with ALC286 (bsc#1051510). - alsa: hda/realtek: Enable headset mic of ASUS P5440FF with ALC256 (bsc#1051510). - alsa: hda/realtek - Headset microphone and internal speaker support for System76 oryp5 (bsc#1051510). - alsa: hda/realtek - Headset microphone support for System76 darp5 (bsc#1051510). - alsa: hda/realtek - Reduce click noise on Dell Precision 5820 headphone (bsc#1126131). - alsa: hda - Record the current power state before suspend/resume calls (bsc#1051510). - alsa: opl3: fix mismatch between snd_opl3_drum_switch definition and declaration (bsc#1051510). - alsa: pcm: Do not suspend stream in unrecoverable PCM state (bsc#1051510). - alsa: pcm: Fix possible OOB access in PCM oss plugins (bsc#1051510). - alsa: rawmidi: Fix potential Spectre v1 vulnerability (bsc#1051510). - alsa: sb8: add a check for request_region (bsc#1051510). - alsa: seq: oss: Fix Spectre v1 vulnerability (bsc#1051510). - alsa: usb-audio: Fix implicit fb endpoint setup by quirk (bsc#1051510). - altera-stapl: check for a null key before strcasecmp'ing it (bsc#1051510). - apparmor: Fix aa_label_build() error handling for failed merges (bsc#1051510). - applicom: Fix potential Spectre v1 vulnerabilities (bsc#1051510). - aquantia: Setup max_mtu in ndev to enable jumbo frames (bsc#1051510). - arm64: fault: avoid send SIGBUS two times (bsc#1126393). - arm: 8808/1: kexec:offline panic_smp_self_stop CPU (bsc#1051510). - arm/arm64: KVM: Rename function kvm_arch_dev_ioctl_check_extension() (bsc#1126393). - arm: iop32x/n2100: fix PCI IRQ mapping (bsc#1051510). - arm: OMAP2+: hwmod: Fix some section annotations (bsc#1051510). - arm: pxa: avoid section mismatch warning (bsc#1051510). - arm: tango: Improve ARCH_MULTIPLATFORM compatibility (bsc#1051510). - ASoC: atom: fix a missing check of snd_pcm_lib_malloc_pages (bsc#1051510). - ASoC: dapm: change snprintf to scnprintf for possible overflow (bsc#1051510). - ASoC: fsl_esai: fix register setting issue in RIGHT_J mode (bsc#1051510). - ASoC: fsl: Fix SND_SOC_EUKREA_TLV320 build error on i.MX8M (bsc#1051510). - ASoC: imx-audmux: change snprintf to scnprintf for possible overflow (bsc#1051510). - ASoC: imx-sgtl5000: put of nodes if finding codec fails (bsc#1051510). - ASoC: Intel: Haswell/Broadwell: fix setting for .dynamic field (bsc#1051510). - ASoC: msm8916-wcd-analog: add missing license information (bsc#1051510). - ASoC: qcom: Fix of-node refcount unbalance in apq8016_sbc_parse_of() (bsc#1051510). - ASoC: rsnd: fixup rsnd_ssi_master_clk_start() user count check (bsc#1051510). - assoc_array: Fix shortcut creation (bsc#1051510). - ata: ahci: mvebu: remove stale comment (bsc#1051510). - ath9k: Avoid OF no-EEPROM quirks without qca,no-eeprom (bsc#1051510). - ath9k: dynack: check da->enabled first in sampling routines (bsc#1051510). - ath9k: dynack: make ewma estimation faster (bsc#1051510). - ath9k: dynack: use authentication messages for 'late' ack (bsc#1051510). - atm: he: fix sign-extension overflow on large shift (bsc#1051510). - auxdisplay: hd44780: Fix memory leak on ->remove() (bsc#1051510). - auxdisplay: ht16k33: fix potential user-after-free on module unload (bsc#1051510). - ax25: fix possible use-after-free (bsc#1051510). - backlight: pwm_bl: Use gpiod_get_value_cansleep() to get initial (bsc#1113722) - batman-adv: Avoid WARN on net_device without parent in netns (bsc#1051510). - batman-adv: fix uninit-value in batadv_interface_tx() (bsc#1051510). - batman-adv: Force mac header to start of data on xmit (bsc#1051510). - bio: Introduce BIO_ALLOCED flag and check it in bio_free (bsc#1128094). - blk-mq: fix a hung issue when fsync (bsc#1125252). - block_dev: fix crash on chained bios with O_DIRECT (bsc#1128094). - block_dev: fix crash on chained bios with O_DIRECT (bsc#1128094). - blockdev: Fix livelocks on loop device (bsc#1124984). - block: do not use bio->bi_vcnt to figure out segment number (bsc#1128895). - block: do not warn when doing fsync on read-only devices (bsc#1125252). - block/loop: Use global lock for ioctl() operation (bsc#1124974). - block: move bio_integrity_{intervals,bytes} into blkdev.h (bsc#1114585). - bluetooth: Fix decrementing reference count twice in releasing socket (bsc#1051510). - bluetooth: Fix locking in bt_accept_enqueue() for BH context (bsc#1051510). - bluetooth: Fix unnecessary error message for HCI request completion (bsc#1051510). - bluetooth: hci_ldisc: Initialize hci_dev before open() (bsc#1051510). - bluetooth: hci_ldisc: Postpone HCI_UART_PROTO_READY bit set in hci_uart_set_proto() (bsc#1051510). - bnxt_en: Fix typo in firmware message timeout logic (bsc#1086282 ). - bnxt_en: Wait longer for the firmware message response to complete (bsc#1086282). - bpf: decrease usercnt if bpf_map_new_fd() fails in bpf_map_get_fd_by_id() (bsc#1083647). - bpf: drop refcount if bpf_map_new_fd() fails in map_create() (bsc#1083647). - bpf: fix lockdep false positive in percpu_freelist (bsc#1083647). - bpf: fix replace_map_fd_with_map_ptr's ldimm64 second imm field (bsc#1083647). - bpf: fix sanitation rewrite in case of non-pointers (bsc#1083647). - bpf: Fix syscall's stackmap lookup potential deadlock (bsc#1083647). - bpf, lpm: fix lookup bug in map_delete_elem (bsc#1083647). - bpf/verifier: fix verifier instability (bsc#1056787). - bsg: Do not copy sense if no response buffer is allocated (bsc#1106811,bsc#1126555). - btrfs: dedupe_file_range ioctl: remove 16MiB restriction (bsc#1127494). - btrfs: do not unnecessarily pass write_lock_level when processing leaf (bsc#1126802). - btrfs: ensure that a DUP or RAID1 block group has exactly two stripes (bsc#1128451). - btrfs: fix clone vs chattr NODATASUM race (bsc#1127497). - btrfs: fix corruption reading shared and compressed extents after hole punching (bsc#1126476). - btrfs: fix deadlock between clone/dedupe and rename (bsc#1130518). - btrfs: fix deadlock when allocating tree block during leaf/node split (bsc#1126806). - btrfs: fix deadlock when using free space tree due to block group creation (bsc#1126804). - btrfs: fix fsync after succession of renames and unlink/rmdir (bsc#1126488). - btrfs: fix fsync after succession of renames of different files (bsc#1126481). - btrfs: fix invalid-free in btrfs_extent_same (bsc#1127498). - btrfs: fix reading stale metadata blocks after degraded raid1 mounts (bsc#1126803). - btrfs: fix use-after-free of cmp workspace pages (bsc#1127603). - btrfs: grab write lock directly if write_lock_level is the max level (bsc#1126802). - btrfs: Improve btrfs_search_slot description (bsc#1126802). - btrfs: move get root out of btrfs_search_slot to a helper (bsc#1126802). - btrfs: qgroup: Cleanup old subtree swap code (bsc#1063638). - btrfs: qgroup: Do not trace subtree if we're dropping reloc tree (bsc#1063638). - btrfs: qgroup: Finish rescan when hit the last leaf of extent tree (bsc#1129327). - btrfs: qgroup: Introduce function to find all new tree blocks of reloc tree (bsc#1063638). - btrfs: qgroup: Introduce function to trace two swaped extents (bsc#1063638). - btrfs: qgroup: Introduce per-root swapped blocks infrastructure (bsc#1063638). - btrfs: qgroup: Introduce trace event to analyse the number of dirty extents accounted (bsc#1063638 dependency). - btrfs: qgroup: Make qgroup async transaction commit more aggressive (bsc#1113042). - btrfs: qgroup: Only trace data extents in leaves if we're relocating data block group (bsc#1063638). - btrfs: qgroup: Refactor btrfs_qgroup_trace_subtree_swap (bsc#1063638). - btrfs: qgroup: Search commit root for rescan to avoid missing extent (bsc#1129326). - btrfs: qgroup: Use delayed subtree rescan for balance (bsc#1063638). - btrfs: qgroup: Use generation-aware subtree swap to mark dirty extents (bsc#1063638). - btrfs: quota: Set rescan progress to (u64)-1 if we hit last leaf (bsc#1129327). - btrfs: relocation: Delay reloc tree deletion after merge_reloc_roots (bsc#1063638). - btrfs: reloc: Fix NULL pointer dereference due to expanded reloc_root lifespan (bsc#1129497). - btrfs: remove always true check in unlock_up (bsc#1126802). - btrfs: remove superfluous free_extent_buffer in read_block_for_search (bsc#1126802). - btrfs: remove unnecessary level check in balance_level (bsc#1126802). - btrfs: remove unused check of skip_locking (bsc#1126802). - btrfs: reuse cmp workspace in EXTENT_SAME ioctl (bsc#1127495). - btrfs: send, fix race with transaction commits that create snapshots (bsc#1126802). - btrfs: simplify IS_ERR/PTR_ERR checks (bsc#1126481). - btrfs: split btrfs_extent_same (bsc#1127493). - btrfs: use kvzalloc for EXTENT_SAME temporary data (bsc#1127496). - btrfs: use more straightforward extent_buffer_uptodate check (bsc#1126802). - cdc-wdm: pass return value of recover_from_urb_loss (bsc#1051510). - ceph: avoid repeatedly adding inode to mdsc->snap_flush_list (bsc#1126790). - ceph: clear inode pointer when snap realm gets dropped by its inode (bsc#1125799). - cfg80211: extend range deviation for DMG (bsc#1051510). - ch: add missing mutex_lock()/mutex_unlock() in ch_release() (bsc#1124235). - ch: fixup refcounting imbalance for SCSI devices (bsc#1124235). - cifs: allow guest mounts to work for smb3.11 (bsc#1051510). - cifs: Always resolve hostname before reconnecting (bsc#1051510). - cifs: connect to servername instead of IP for IPC$ share (bsc#1051510). - cifs: Fix NULL pointer dereference of devname (bnc#1129519). - cifs: invalidate cache when we truncate a file (bsc#1051510). - cifs: OFD locks do not conflict with eachothers (bsc#1051510). - clk: armada-370: fix refcount leak in a370_clk_init() (bsc#1051510). - clk: armada-xp: fix refcount leak in axp_clk_init() (bsc#1051510). - clk: clk-twl6040: Fix imprecise external abort for pdmclk (bsc#1051510). - clk: dove: fix refcount leak in dove_clk_init() (bsc#1051510). - clk: highbank: fix refcount leak in hb_clk_init() (bsc#1051510). - clk: imx6q: fix refcount leak in imx6q_clocks_init() (bsc#1051510). - clk: imx6sl: ensure MMDC CH0 handshake is bypassed (bsc#1051510). - clk: imx6sx: fix refcount leak in imx6sx_clocks_init() (bsc#1051510). - clk: imx7d: fix refcount leak in imx7d_clocks_init() (bsc#1051510). - clk: ingenic: Fix doc of ingenic_cgu_div_info (bsc#1051510). - clk: ingenic: Fix round_rate misbehaving with non-integer dividers (bsc#1051510). - clk: kirkwood: fix refcount leak in kirkwood_clk_init() (bsc#1051510). - clk: mv98dx3236: fix refcount leak in mv98dx3236_clk_init() (bsc#1051510). - clk: qoriq: fix refcount leak in clockgen_init() (bsc#1051510). - clk: samsung: exynos4: fix refcount leak in exynos4_get_xom() (bsc#1051510). - clk: socfpga: fix refcount leak (bsc#1051510). - clk: sunxi: A31: Fix wrong AHB gate number (bsc#1051510). - clk: sunxi-ng: a33: Set CLK_SET_RATE_PARENT for all audio module clocks (bsc#1051510). - clk: sunxi-ng: sun8i-a23: Enable PLL-MIPI LDOs when ungating it (bsc#1051510). - clk: sunxi-ng: v3s: Fix TCON reset de-assert bit (bsc#1051510). - clk: uniphier: Fix update register for CPU-gear (bsc#1051510). - clk: vc5: Abort clock configuration without upstream clock (bsc#1051510). - clk: vf610: fix refcount leak in vf610_clocks_init() (bsc#1051510). - clocksource/drivers/exynos_mct: Clear timer interrupt when shutdown (bsc#1051510). - clocksource/drivers/exynos_mct: Fix error path in timer resources initialization (bsc#1051510). - clocksource/drivers/exynos_mct: Move one-shot check from tick clear to ISR (bsc#1051510). - clocksource/drivers/integrator-ap: Add missing of_node_put() (bsc#1051510). - clocksource/drivers/sun5i: Fail gracefully when clock rate is unavailable (bsc#1051510). - configfs: fix registered group removal (bsc#1051510). - copy_mount_string: Limit string length to PATH_MAX (bsc#1082943). - cpcap-charger: generate events for userspace (bsc#1051510). - cpufreq: Cap the default transition delay value to 10 ms (bsc#1127042). - cpufreq: conservative: Take limits changes into account properly (bsc#1051510). - cpufreq: governor: Avoid accessing invalid governor_data (bsc#1051510). - cpufreq: governor: Drop min_sampling_rate (bsc#1127042). - cpufreq: governor: Ensure sufficiently large sampling intervals (bsc#1127042). - cpufreq: pxa2xx: remove incorrect __init annotation (bsc#1051510). - cpufreq: tegra124: add missing of_node_put() (bsc#1051510). - cpufreq: Use transition_delay_us for legacy governors as well (bsc#1127042). - cpuidle: big.LITTLE: fix refcount leak (bsc#1051510). - crypto: aes_ti - disable interrupts while accessing S-box (bsc#1051510). - crypto: ahash - fix another early termination in hash walk (bsc#1051510). - crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling (bsc#1051510). - crypto: arm/crct10dif - revert to C code for short inputs (bsc#1051510). - crypto: brcm - Fix some set-but-not-used warning (bsc#1051510). - crypto: caam - fixed handling of sg list (bsc#1051510). - crypto: cavium/zip - fix collision with generic cra_driver_name (bsc#1051510). - crypto: crypto4xx - add missing of_node_put after of_device_is_available (bsc#1051510). - crypto: crypto4xx - Fix wrong ppc4xx_trng_probe()/ppc4xx_trng_remove() arguments (bsc#1051510). - crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails (bsc#1051510). - crypto: testmgr - skip crc32c context test for ahash algorithms (bsc#1051510). - crypto: tgr192 - fix unaligned memory access (bsc#1051510). - crypto: ux500 - Use proper enum in cryp_set_dma_transfer (bsc#1051510). - crypto: ux500 - Use proper enum in hash_set_dma_transfer (bsc#1051510). - cw1200: drop useless LIST_HEAD (bsc#1051510). - cw1200: Fix concurrency use-after-free bugs in cw1200_hw_scan() (bsc#1051510). - cw1200: fix missing unlock on error in cw1200_hw_scan() (bsc#1051510). - dccp: fool proof ccid_hc_[rt]x_parse_options() (bsc#1051510). - debugfs: fix debugfs_rename parameter checking (bsc#1051510). - device property: Fix the length used in PROPERTY_ENTRY_STRING() (bsc#1051510). - dlm: Do not swamp the CPU with callbacks queued during recovery (bsc#1051510). - dmaengine: at_hdmac: drop useless LIST_HEAD (bsc#1051510). - dmaengine: at_xdmac: Fix wrongfull report of a channel as in use (bsc#1051510). - dmaengine: bcm2835: Fix abort of transactions (bsc#1051510). - dmaengine: bcm2835: Fix interrupt race on RT (bsc#1051510). - dmaengine: dmatest: Abort test in case of mapping error (bsc#1051510). - dmaengine: dw: drop useless LIST_HEAD (bsc#1051510). - dmaengine: imx-dma: fix wrong callback invoke (bsc#1051510). - dmaengine: mv_xor: Use correct device for DMA API (bsc#1051510). - dmaengine: pl330: drop useless LIST_HEAD (bsc#1051510). - dmaengine: sa11x0: drop useless LIST_HEAD (bsc#1051510). - dmaengine: st_fdma: drop useless LIST_HEAD (bsc#1051510). - dmaengine: stm32-dma: fix incomplete configuration in cyclic mode (bsc#1051510). - dma: Introduce dma_max_mapping_size() (bsc#1120008). - doc: rcu: Suspicious RCU usage is a warning (bsc#1051510). - Do not log confusing message on reconnect by default (bsc#1129664). - driver core: Do not resume suppliers under device_links_write_lock() (bsc#1051510). - drivers: hv: vmbus: Check for ring when getting debug info (bsc#1126389, bsc#1126579). - drivers: hv: vmbus: preserve hv_ringbuffer_get_debuginfo kABI (bsc#1126389, bsc#1126579). - drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels (bsc#1126389, bsc#1126579). - drm/amdgpu: Add delay after enable RLC ucode (bsc#1051510). - drm/ast: Fix connector leak during driver unload (bsc#1051510). - drm/ast: fixed reading monitor EDID not stable issue (bsc#1051510). - drm/atomic-helper: Complete fake_commit->flip_done potentially earlier (bsc#1051510). - drm: Block fb changes for async plane updates (bsc#1051510). - drm/bridge: tc358767: add defines for DP1_SRCCTRL & PHY_2LANE (bsc#1051510). - drm/bridge: tc358767: fix initial DP0/1_SRCCTRL value (bsc#1051510). - drm/bridge: tc358767: fix output H/V syncs (bsc#1051510). - drm/bridge: tc358767: fix single lane configuration (bsc#1051510). - drm/bridge: tc358767: reject modes which require too much BW (bsc#1051510). - drm/bufs: Fix Spectre v1 vulnerability (bsc#1051510). - drm: Clear state->acquire_ctx before leaving drm_atomic_helper_commit_duplicated_state() (bsc#1051510). - drm: disable uncached DMA optimization for ARM and arm64 (bsc#1051510). - drm/etnaviv: NULL vs IS_ERR() buf in etnaviv_core_dump() (bsc#1113722) - drm/etnaviv: potential NULL dereference (bsc#1113722) - drm: Fix error handling in drm_legacy_addctx (bsc#1113722) - drm/i915/bios: assume eDP is present on port A when there is no VBT (bsc#1051510). - drm/i915: Block fbdev HPD processing during suspend (bsc#1113722) - drm/i915/fbdev: Actually configure untiled displays (bsc#1113722) - drm/i915: Flush GPU relocs harder for gen3 (bsc#1113722) - drm/i915/gvt: free VFIO region space in vgpu detach (bsc#1113722) - drm/i915/gvt: release shadow batch buffer and wa_ctx before destroy one workload (bsc#1051510). - drm/i915/opregion: fix version check (bsc#1113722) - drm/i915/opregion: rvda is relative from opregion base in opregion (bsc#1113722) - drm/i915: Prevent a race during I915_GEM_MMAP ioctl with WC set (bsc#1113722) - drm/i915: Redefine some Whiskey Lake SKUs (bsc#1051510). - drm/i915: Relax mmap VMA check (bsc#1051510). - drm/i915: Use the correct crtc when sanitizing plane mapping (bsc#1113722) - drm/imx: ignore plane updates on disabled crtcs (bsc#1051510). - drm/imx: imx-ldb: add missing of_node_puts (bsc#1051510). - drm/meson: add missing of_node_put (bsc#1051510). - drm/modes: Prevent division by zero htotal (bsc#1051510). - drm/msm: Fix error return checking (bsc#1051510). - drm/msm: Grab a vblank reference when waiting for commit_done (bsc#1051510). - drm/msm: Unblock writer if reader closes file (bsc#1051510). - drm/nouveau/bios/ramcfg: fix missing parentheses when calculating RON (bsc#1113722) - drm/nouveau/debugfs: Fix check of pm_runtime_get_sync failure (bsc#1051510). - drm/nouveau: Do not spew kernel WARNING for each timeout (bsc#1126480). - drm/nouveau: Do not WARN_ON VCPI allocation failures (bsc#1113722) - drm/nouveau/falcon: avoid touching registers if engine is off (bsc#1051510). - drm/nouveau/pmu: do not print reply values if exec is false (bsc#1113722) - drm/radeon/evergreen_cs: fix missing break in switch statement (bsc#1113722) - drm: Reorder set_property_atomic to avoid returning with an active ww_ctx (bsc#1051510). - drm/rockchip: fix for mailbox read size (bsc#1051510). - drm/shmob: Fix return value check in shmob_drm_probe (bsc#1113722) - drm/sun4i: tcon: Prepare and enable TCON channel 0 clock at init (bsc#1051510). - drm/vmwgfx: Do not double-free the mode stored in par->set_mode (bsc#1103429) - earlycon: Initialize port->uartclk based on clock-frequency property (bsc#1051510). - earlycon: Remove hardcoded port->uartclk initialization in of_setup_earlycon (bsc#1051510). - Enable CONFIG_RDMA_RXE=m also for ppc64le (bsc#1107665,) - Enable livepatch test drivers in lib/ Livepatch kselftests need those. - enic: fix build warning without CONFIG_CPUMASK_OFFSTACK (bsc#1051510). - enic: fix checksum validation for IPv6 (bsc#1051510). - esp6: fix memleak on error path in esp6_input (bsc#1051510). - esp: Fix locking on page fragment allocation (bsc#1051510). - esp: Fix memleaks on error paths (bsc#1051510). - esp: Fix skb tailroom calculation (bsc#1051510). - ext4: avoid kernel warning when writing the superblock to a dead device (bsc#1124981). - ext4: Avoid panic during forced reboot (bsc#1126356). - ext4: check for shutdown and r/o file system in ext4_write_inode() (bsc#1124978). - ext4: fix a potential fiemap/page fault deadlock w/ inline_data (bsc#1124980). - ext4: force inode writes when nfsd calls commit_metadata() (bsc#1125125). - ext4: include terminating u32 in size of xattr entries when expanding inodes (bsc#1124976). - ext4: make sure enough credits are reserved for dioread_nolock writes (bsc#1124979). - ext4: track writeback errors using the generic tracking infrastructure (bsc#1124982). - fbdev: chipsfb: remove set but not used variable 'size' (bsc#1113722) - firmware/efi: Add NULL pointer checks in efivars API functions (bsc#1051510). - floppy: check_events callback should not return a negative number (bsc#1051510). - fs/dax: deposit pagetable even when installing zero page (bsc#1126740). - fs/dcache: Fix incorrect nr_dentry_unused accounting in shrink_dcache_sb() (git-fixes). - fs/devpts: always delete dcache dentry-s in dput() (git-fixes). - fuse: call pipe_buf_release() under pipe lock (bsc#1051510). - fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS (bsc#1051510). - fuse: decrement NR_WRITEBACK_TEMP on the right page (bsc#1051510). - fuse: handle zero sized retrieve correctly (bsc#1051510). - futex: Fix (possible) missed wakeup (bsc#1050549). - gdrom: fix a memory leak bug (bsc#1051510). - geneve: cleanup hard coded value for Ethernet header length (bsc#1123456). - geneve: correctly handle ipv6.disable module parameter (bsc#1051510). - geneve, vxlan: Do not check skb_dst() twice (bsc#1123456). - geneve, vxlan: Do not set exceptions if skb->len < mtu (bsc#1123456). - genwqe: Fix size check (bsc#1051510). - gfs2: Revert "Fix loop in gfs2_rbm_find" (bsc#1120601). - gianfar: fix a flooded alignment reports because of padding issue (bsc#1051510). - gianfar: Fix Rx byte accounting for ndev stats (bsc#1051510). - gianfar: prevent integer wrapping in the rx handler (bsc#1051510). - gpu: ipu-v3: Fix CSI offsets for imx53 (bsc#1113722) - gpu: ipu-v3: Fix i.MX51 CSI control registers offset (bsc#1113722) - gpu: ipu-v3: image-convert: Prevent race between run and unprepare (bsc#1051510). - gro_cells: make sure device is up in gro_cells_receive() (git-fixes). - hid: lenovo: Add checks to fix of_led_classdev_register (bsc#1051510). - hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable (git-fixes). - hvc_opal: do not set tb_ticks_per_usec in udbg_init_opal_common() (bsc#1051510). - hv: reduce storvsc_ringbuffer_size from 1M to 128K to simplify booting with 1k vcpus (). - hv: v4.12 API for hyperv-iommu (bsc#1122822). - hwmon: (lm80) fix a missing check of bus read in lm80 probe (bsc#1051510). - hwmon: (lm80) fix a missing check of the status of SMBus read (bsc#1051510). - hwmon: (lm80) Fix missing unlock on error in set_fan_div() (bsc#1051510). - hwmon: (tmp421) Correct the misspelling of the tmp442 compatible attribute in OF device ID table (bsc#1051510). - HYPERV/IOMMU: Add Hyper-V stub IOMMU driver (bsc#1122822). - i2c-axxia: check for error conditions first (bsc#1051510). - i2c: bcm2835: Clear current buffer pointers and counts after a transfer (bsc#1051510). - i2c: cadence: Fix the hold bit setting (bsc#1051510). - i2c: omap: Use noirq system sleep pm ops to idle device for suspend (bsc#1051510). - i2c: sh_mobile: add support for r8a77990 (R-Car E3) (bsc#1051510). - i2c: tegra: fix maximum transfer size (bsc#1051510). - ib/core: Destroy QP if XRC QP fails (bsc#1046306). - ib/core: Fix potential memory leak while creating MAD agents (bsc#1046306). - ib/core: Unregister notifier before freeing MAD security (bsc#1046306). - ib/hfi1: Close race condition on user context disable and close (bsc#1060463). - ib/mlx5: Unmap DMA addr from HCA before IOMMU (bsc#1046305 ). - ibmvnic: Report actual backing device speed and duplex values (bsc#1129923). - ibmvscsi: Fix empty event pool access during host removal (bsc#1119019). - ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton (bsc#1119019). - ieee802154: ca8210: fix possible u8 overflow in ca8210_rx_done (bsc#1051510). - igb: Fix an issue that PME is not enabled during runtime suspend (bsc#1051510). - iio: accel: kxcjk1013: Add KIOX010A ACPI Hardware-ID (bsc#1051510). - iio: adc: exynos-adc: Fix NULL pointer exception on unbind (bsc#1051510). - iio: chemical: atlas-ph-sensor: correct IIO_TEMP values to millicelsius (bsc#1051510). - Input: bma150 - register input device after setting private data (bsc#1051510). - input: cap11xx - switch to using set_brightness_blocking() (bsc#1051510). - Input: elan_i2c - add ACPI ID for touchpad in Lenovo V330-15ISK (bsc#1051510). - Input: elan_i2c - add id for touchpad found in Lenovo s21e-20 (bsc#1051510). - Input: elantech - enable 3rd button support on Fujitsu CELSIUS H780 (bsc#1051510). - input: matrix_keypad - use flush_delayed_work() (bsc#1051510). - Input: raspberrypi-ts - select CONFIG_INPUT_POLLDEV (git-fixes). - input: st-keyscan - fix potential zalloc NULL dereference (bsc#1051510). - input: uinput - fix undefined behavior in uinput_validate_absinfo() (bsc#1120902). - Input: wacom_serial4 - add support for Wacom ArtPad II tablet (bsc#1051510). - intel_th: Do not reference unassigned outputs (bsc#1051510). - intel_th: gth: Fix an off-by-one in output unassigning (bsc#1051510). - iomap: fix integer truncation issues in the zeroing and dirtying helpers (bsc#1125947). - iomap: warn on zero-length mappings (bsc#1127062). - iommu/amd: Fix NULL dereference bug in match_hid_uid (bsc#1130336). - iommu/amd: fix sg->dma_address for sg->offset bigger than PAGE_SIZE (bsc#1130337). - iommu/amd: Reserve exclusion range in iova-domain (bsc#1130425). - iommu/dmar: Fix buffer overflow during PCI bus notification (bsc#1129181). - iommu: Document iommu_ops.is_attach_deferred() (bsc#1129182). - iommu: Do not print warning when IOMMU driver only supports unmanaged domains (bsc#1130130). - iommu/io-pgtable-arm-v7s: Only kmemleak_ignore L2 tables (bsc#1129205). - iommu/vt-d: Check capability before disabling protected memory (bsc#1130338). - iommu/vt-d: Check identity map for hot-added devices (bsc#1129183). - iommu/vt-d: Fix NULL pointer reference in intel_svm_bind_mm() (bsc#1129184). - ip6: fix PMTU discovery when using /127 subnets (git-fixes). - ip6mr: Do not call __IP6_INC_STATS() from preemptible context (git-fixes). - ip6_tunnel: get the min mtu properly in ip6_tnl_xmit (bsc#1123456). - ip6_tunnel: use the right value for ipv4 min mtu check in ip6_tnl_xmit (bsc#1123456). - ipsec: check return value of skb_to_sgvec always (bsc#1051510). - ipv4/route: fail early when inet dev is missing (git-fixes). - ipv4: speedup ipv6 tunnels dismantle (bsc#1122982). - ipv6: addrlabel: per netns list (bsc#1122982). - ipv6: Consider sk_bound_dev_if when binding a socket to an address (networking-stable-19_02_01). - ipv6: Consider sk_bound_dev_if when binding a socket to a v4 mapped address (networking-stable-19_01_22). - ipv6: fix kernel-infoleak in ipv6_local_error() (networking-stable-19_01_20). - ipv6: speedup ipv6 tunnels dismantle (bsc#1122982). Refresh patches.suse/ip6_vti-fix-a-null-pointer-deference-when-destroy-vt.patch - ipv6: Take rcu_read_lock in __inet6_bind for mapped addresses (networking-stable-19_01_22). - ipvlan, l3mdev: fix broken l3s mode wrt local routes (networking-stable-19_02_01). - irqchip/gic-v3-its: Align PCI Multi-MSI allocation on their size (bsc#1051510). - irqchip/gic-v3-its: Avoid parsing _indirect_ twice for Device table (bsc#1051510). - irqchip/gic-v3-its: Do not bind LPI to unavailable NUMA node (bsc#1051510). - irqchip/gic-v3-its: Fix ITT_entry_size accessor (bsc#1051510). - irqchip/mmp: Only touch the PJ4 IRQ & FIQ bits on enable/disable (bsc#1051510). - iscsi_ibft: Fix missing break in switch statement (bsc#1051510). - isdn: avm: Fix string plus integer warning from Clang (bsc#1051510). - isdn: hisax: hfc_pci: Fix a possible concurrency use-after-free bug in HFCPCI_l1hw() (bsc#1051510). - isdn: i4l: isdn_tty: Fix some concurrency double-free bugs (bsc#1051510). - iser: set sector for ambiguous mr status errors (bsc#1051510). - iwlwifi: mvm: avoid possible access out of array (bsc#1051510). - iwlwifi: mvm: fix A-MPDU reference assignment (bsc#1051510). - iwlwifi: mvm: fix firmware statistics usage (bsc#1129770). - iwlwifi: mvm: fix RSS config command (bsc#1051510). - iwlwifi: pcie: fix emergency path (bsc#1051510). - iwlwifi: pcie: fix TX while flushing (bsc#1120902). - ixgbe: Be more careful when modifying MAC filters (bsc#1051510). - ixgbe: check return value of napi_complete_done() (bsc#1051510). - ixgbe: recognize 1000BaseLX SFP modules as 1Gbps (bsc#1051510). - kabi: cpufreq: keep min_sampling_rate in struct dbs_data (bsc#1127042). - kabi: handle addition of ip6addrlbl_table into struct netns_ipv6 (bsc#1122982). - kabi: handle addition of uevent_sock into struct net (bsc#1122982). - kabi: Preserve kABI for dma_max_mapping_size() (bsc#1120008). - kabi: protect vhost_log_write (kabi). - kabi: restore ip_tunnel_delete_net() (bsc#1122982). - kabi workaround for ath9k ath_node.ackto type change (bsc#1051510). - kABI workaround for bt_accept_enqueue() change (bsc#1051510). - kallsyms: Handle too long symbols in kallsyms.c (bsc#1126805). - kasan: fix shadow_size calculation error in kasan_module_alloc (bsc#1051510). - kbuild: fix false positive warning/error about missing libelf (bsc#1051510). - kconfig: fix file name and line number of warn_ignored_character() (bsc#1051510). - kconfig: fix line numbers for if-entries in menu tree (bsc#1051510). - kconfig: fix memory leak when EOF is encountered in quotation (bsc#1051510). - kconfig: fix the rule of mainmenu_stmt symbol (bsc#1051510). - keys: allow reaching the keys quotas exactly (bsc#1051510). - keys: Timestamp new keys (bsc#1051510). - kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() (bsc#1051510). - kgdboc: Fix restrict error (bsc#1051510). - kgdboc: Fix warning with module build (bsc#1051510). - kobject: add kobject_uevent_net_broadcast() (bsc#1122982). - kobject: copy env blob in one go (bsc#1122982). - kobject: factorize skb setup in kobject_uevent_net_broadcast() (bsc#1122982). - kprobes: Return error if we fail to reuse kprobe instead of BUG_ON() (bsc#1051510). - kvm: mmu: Fix race in emulated page table writes (bsc#1129284). - kvm: nVMX: Free the VMREAD/VMWRITE bitmaps if alloc_kvm_area() fails (bsc#1129291). - kvm: nVMX: NMI-window and interrupt-window exiting should wake L2 from HLT (bsc#1129292). - kvm: nVMX: Set VM instruction error for VMPTRLD of unbacked page (bsc#1129293). - kvm: vmx: Set IA32_TSC_AUX for legacy mode guests (bsc#1129294). - kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs (bsc#1127082). - kvm: x86: Fix single-step debugging (bsc#1129295). - kvm: x86: Use jmp to invoke kvm_spurious_fault() from .fixup (bsc#1129296). - l2tp: copy 4 more bytes to linear part if necessary (networking-stable-19_02_01). - l2tp: fix infoleak in l2tp_ip6_recvmsg() (git-fixes). - l2tp: fix reading optional fields of L2TPv3 (networking-stable-19_02_01). - leds: lp5523: fix a missing check of return value of lp55xx_read (bsc#1051510). - leds: lp55xx: fix null deref on firmware load failure (bsc#1051510). - libceph: avoid KEEPALIVE_PENDING races in ceph_con_keepalive() (bsc#1125800). - libceph: handle an empty authorize reply (bsc#1126789). - libceph: wait for latest osdmap in ceph_monc_blacklist_add() (bsc#1130427). - lib/div64.c: off by one in shift (bsc#1051510). - libertas_tf: do not set URB_ZERO_PACKET on IN USB transfer (bsc#1051510). - libnvdimm: Fix altmap reservation size calculation (bsc#1127682). - libnvdimm/label: Clear 'updating' flag after label-set update (bsc#1129543). - libnvdimm/pmem: Honor force_raw for legacy pmem regions (bsc#1129551). - lightnvm: fail fast on passthrough commands (bsc#1125780). - livepatch: Change unsigned long old_addr -> void *old_func in struct klp_func (bsc#1071995). - livepatch: Consolidate klp_free functions (bsc#1071995 ). - livepatch: core: Return EOPNOTSUPP instead of ENOSYS (bsc#1071995). - livepatch: Define a macro for new API identification (bsc#1071995). - livepatch: Do not block the removal of patches loaded after a forced transition (bsc#1071995). - livepatch: Introduce klp_for_each_patch macro (bsc#1071995 ). - livepatch: Module coming and going callbacks can proceed with all listed patches (bsc#1071995). - livepatch: Proper error handling in the shadow variables selftest (bsc#1071995). - livepatch: Remove ordering (stacking) of the livepatches (bsc#1071995). - livepatch: Remove signal sysfs attribute (bsc#1071995 ). - livepatch: return -ENOMEM on ptr_id() allocation failure (bsc#1071995). - livepatch: Send a fake signal periodically (bsc#1071995 ). - livepatch: Shuffle klp_enable_patch()/klp_disable_patch() code (bsc#1071995). - livepatch: Simplify API by removing registration step (bsc#1071995). - llc: do not use sk_eat_skb() (bsc#1051510). - locking/rwsem: Fix (possible) missed wakeup (bsc#1050549). - loop: drop caches if offset or block_size are changed (bsc#1124975). - loop: Reintroduce lo_ctl_mutex removed by commit 310ca162d (bsc#1124974). - mac80211: Add attribute aligned(2) to struct 'action' (bsc#1051510). - mac80211: do not initiate TDLS connection if station is not associated to AP (bsc#1051510). - mac80211: ensure that mgmt tx skbs have tailroom for encryption (bsc#1051510). - mac80211: fix miscounting of ttl-dropped frames (bsc#1051510). - mac80211: fix radiotap vendor presence bitmap handling (bsc#1051510). - mac80211: Fix Tx aggregation session tear down with ITXQs (bsc#1051510). - mac80211: Free mpath object when rhashtable insertion fails (bsc#1051510). - mac80211_hwsim: propagate genlmsg_reply return code (bsc#1051510). - mac80211: Restore vif beacon interval if start ap fails (bsc#1051510). - macvlan: Only deliver one copy of the frame to the macvlan interface (bsc#1051510). - mailbox: bcm-flexrm-mailbox: Fix FlexRM ring flush timeout issue (bsc#1051510). - mdio_bus: Fix use-after-free on device_register fails (bsc#1051510). - media: adv*/tc358743/ths8200: fill in min width/height/pixelclock (bsc#1051510). - media: DaVinci-VPBE: fix error handling in vpbe_initialize() (bsc#1051510). - media: dt-bindings: media: i2c: Fix i2c address for OV5645 camera sensor (bsc#1051510). - media: mtk-vcodec: Release device nodes in mtk_vcodec_init_enc_pm() (bsc#1051510). - media: rc: mce_kbd decoder: fix stuck keys (bsc#1100132). - media: s5k4ecgx: delete a bogus error message (bsc#1051510). - media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration (bsc#1051510). - media: s5p-jpeg: Correct step and max values for V4L2_CID_JPEG_RESTART_INTERVAL (bsc#1051510). - media: s5p-mfc: fix incorrect bus assignment in virtual child device (bsc#1051510). - media: uvcvideo: Avoid NULL pointer dereference at the end of streaming (bsc#1051510). - media: uvcvideo: Fix 'type' check leading to overflow (bsc#1051510). - media: v4l2-ctrls.c/uvc: zero v4l2_event (bsc#1051510). - media: v4l2: i2c: ov7670: Fix PLL bypass register values (bsc#1051510). - media: vb2: do not call __vb2_queue_cancel if vb2_start_streaming failed (bsc#1119086). - memremap: fix softlockup reports at teardown (bnc#1130154). - memstick: Prevent memstick host from getting runtime suspended during card detection (bsc#1051510). - mfd: db8500-prcmu: Fix some section annotations (bsc#1051510). - mfd: mc13xxx: Fix a missing check of a register-read failure (bsc#1051510). - mfd: mt6397: Do not call irq_domain_remove if PMIC unsupported (bsc#1051510). - mfd: qcom_rpm: write fw_version to CTRL_REG (bsc#1051510). - mfd: ti_am335x_tscadc: Use PLATFORM_DEVID_AUTO while registering mfd cells (bsc#1051510). - mfd: tps65218: Use devm_regmap_add_irq_chip and clean up error path in probe() (bsc#1051510). - mfd: twl-core: Fix section annotations on {,un}protect_pm_master (bsc#1051510). - mfd: wm5110: Add missing ASRC rate register (bsc#1051510). - misc: hpilo: Do not claim unsupported hardware (bsc#1129330). - misc: hpilo: Exclude unsupported device via blacklist (bsc#1129330). - mISDN: fix a race in dev_expire_timer() (bsc#1051510). - mlxsw: __mlxsw_sp_port_headroom_set(): Fix a use of local variable (git-fixes). - mlxsw: spectrum: Disable lag port TX before removing it (networking-stable-19_01_22). - mmap: introduce sane default mmap limits (git fixes (mm/mmap)). - mmap: relax file size limit for regular files (git fixes (mm/mmap)). - mmc: bcm2835: Recover from MMC_SEND_EXT_CSD (bsc#1051510). - mmc: Kconfig: Enable CONFIG_MMC_SDHCI_IO_ACCESSORS (bsc#1051510). - mmc: omap: fix the maximum timeout setting (bsc#1051510). - mmc: pxamci: fix enum type confusion (bsc#1051510). - mmc: sdhci-brcmstb: handle mmc_of_parse() errors during probe (bsc#1051510). - mmc: sdhci-esdhc-imx: fix HS400 timing issue (bsc#1051510). - mmc: sdhci-of-esdhc: Fix timeout checks (bsc#1051510). - mmc: sdhci-xenon: Fix timeout checks (bsc#1051510). - mmc: spi: Fix card detection during probe (bsc#1051510). - mm: do not drop unused pages when userfaultd is running (git fixes (mm/userfaultfd)). - mm: Fix modifying of page protection by insert_pfn() (bsc#1126740). - mm: Fix warning in insert_pfn() (bsc#1126740). - mm/hmm: hmm_pfns_bad() was accessing wrong struct (git fixes (mm/hmm)). - mm: hwpoison: use do_send_sig_info() instead of force_sig() (git fixes (mm/hwpoison)). - mm/ksm.c: ignore STABLE_FLAG of rmap_item->address in rmap_walk_ksm() (git fixes (mm/ksm)). - mm: madvise(MADV_DODUMP): allow hugetlbfs pages (git fixes (mm/madvise)). - mm,memory_hotplug: fix scan_movable_pages() for gigantic hugepages (bsc#1127731). - mm: migrate: do not rely on __PageMovable() of newpage after unlocking it (git fixes (mm/migrate)). - mm, oom: fix use-after-free in oom_kill_process (git fixes (mm/oom)). - mm: use swp_offset as key in shmem_replace_page() (git fixes (mm/shmem)). - mm,vmscan: Make unregister_shrinker() no-op if register_shrinker() failed (git fixes (mm/vmscan)). - Move upstreamed ALSA and BT patches into sorted section - Move upstreamed libnvdimm patch into sorted section - mtd: cfi_cmdset_0002: Avoid walking all chips when unlocking (bsc#1051510). - mtd: cfi_cmdset_0002: Change write buffer to check correct value (bsc#1051510). - mtd: cfi_cmdset_0002: fix SEGV unlocking multiple chips (bsc#1051510). - mtd: cfi_cmdset_0002: Fix unlocking requests crossing a chip boudary (bsc#1051510). - mtd: cfi_cmdset_0002: Use right chip in do_ppb_xxlock() (bsc#1051510). - mtdchar: fix overflows in adjustment of `count` (bsc#1051510). - mtdchar: fix usage of mtd_ooblayout_ecc() (bsc#1051510). - mtd: docg3: do not set conflicting BCH_CONST_PARAMS option (bsc#1051510). - mtd/maps: fix solutionengine.c printk format warnings (bsc#1051510). - mtd: mtd_oobtest: Handle bitflips during reads (bsc#1051510). - mtd: nand: atmel: fix buffer overflow in atmel_pmecc_user (bsc#1051510). - mtd: nand: atmel: Fix get_sectorsize() function (bsc#1051510). - mtd: nand: atmel: fix of_irq_get() error check (bsc#1051510). - mtd: nand: brcmnand: Disable prefetch by default (bsc#1051510). - mtd: nand: brcmnand: Zero bitflip is not an error (bsc#1051510). - mtd: nand: denali_pci: add missing MODULE_DESCRIPTION/AUTHOR/LICENSE (bsc#1051510). - mtd: nand: fix interpretation of NAND_CMD_NONE in nand_command[_lp]() (bsc#1051510). - mtd: nand: Fix nand_do_read_oob() return value (bsc#1051510). - mtd: nand: Fix writing mtdoops to nand flash (bsc#1051510). - mtd: nand: fsl_ifc: Fix nand waitfunc return value (bsc#1051510). - mtd: nand: gpmi: Fix failure when a erased page has a bitflip at BBM (bsc#1051510). - mtd: nand: ifc: update bufnum mask for ver >= 2.0.0 (bsc#1051510). - mtd: nand: mtk: fix infinite ECC decode IRQ issue (bsc#1051510). - mtd: nand: omap2: Fix subpage write (bsc#1051510). - mtd: nand: pxa3xx: Fix READOOB implementation (bsc#1051510). - mtd: nand: qcom: Add a NULL check for devm_kasprintf() (bsc#1051510). - mtd: nandsim: remove debugfs entries in error path (bsc#1051510). - mtd: nand: sunxi: Fix ECC strength choice (bsc#1051510). - mtd: nand: sunxi: fix potential divide-by-zero error (bsc#1051510). - mtd: nand: vf610: set correct ooblayout (bsc#1051510). - mtd: spi-nor: cadence-quadspi: Fix page fault kernel panic (bsc#1051510). - mtd: spi-nor: Fix Cadence QSPI page fault kernel panic (bsc#1051510). - mtd: spi-nor: fsl-quadspi: fix read error for flash size larger than 16MB (bsc#1051510). - mtd: spi-nor: stm32-quadspi: Fix uninitialized error return code (bsc#1051510). - mv88e6060: disable hardware level MAC learning (bsc#1051510). - nbd: Use set_blocksize() to set device blocksize (bsc#1124984). - net: add uevent socket member (bsc#1122982). - net: aquantia: driver should correctly declare vlan_features bits (bsc#1051510). - net: aquantia: fixed instack structure overflow (git-fixes). - net: aquantia: Fix hardware DMA stream overload on large MRRS (bsc#1051510). - net: bcmgenet: abort suspend on error (bsc#1051510). - net: bcmgenet: code movement (bsc#1051510). - net: bcmgenet: fix OF child-node lookup (bsc#1051510). - net: bcmgenet: remove HFB_CTRL access (bsc#1051510). - net: bcmgenet: return correct value 'ret' from bcmgenet_power_down (bsc#1051510). - net: bridge: fix a bug on using a neighbour cache entry without checking its state (networking-stable-19_01_20). - net: bridge: Fix ethernet header pointer before check skb forwardable (networking-stable-19_01_26). - net: do not call update_pmtu unconditionally (bsc#1123456). - net: Do not default Cavium PTP driver to 'y' (bsc#1110096). - net: dp83640: expire old TX-skb (networking-stable-19_02_10). - net: dsa: mv88e6xxx: handle unknown duplex modes gracefully in mv88e6xxx_port_set_duplex (git-fixes). - net: dsa: mv88x6xxx: mv88e6390 errata (networking-stable-19_01_22). - net: dsa: slave: Do not propagate flag changes on down slave interfaces (networking-stable-19_02_10). - net: ena: fix race between link up and device initalization (bsc#1083548). - net: ena: update driver version from 2.0.2 to 2.0.3 (bsc#1129276 bsc#1125342). - netfilter: check for seqadj ext existence before adding it in nf_nat_setup_info (git-fixes). - netfilter: nf_tables: check the result of dereferencing base_chain->stats (git-fixes). - net: Fix usage of pskb_trim_rcsum (networking-stable-19_01_26). - net: ipv4: Fix memory leak in network namespace dismantle (networking-stable-19_01_26). - net/mlx4_core: Add masking for a few queries on HCA caps (networking-stable-19_02_01). - net/mlx4_core: Fix locking in SRIOV mode when switching between events and polling (git-fixes). - net/mlx4_core: Fix qp mtt size calculation (git-fixes). - net/mlx4_core: Fix reset flow when in command polling mode (git-fixes). - net/mlx5e: Allow MAC invalidation while spoofchk is ON (networking-stable-19_02_01). - net/mlx5e: IPoIB, Fix RX checksum statistics update (git-fixes). - net/mlx5e: RX, Fix wrong early return in receive queue poll (bsc#1046305). - net/mlx5: fix uaccess beyond "count" in debugfs read/write handlers (git-fixes). - net/mlx5: Release resource on error flow (git-fixes). - net/mlx5: Return success for PAGE_FAULT_RESUME in internal error state (git-fixes). - net/mlx5: Use multi threaded workqueue for page fault handling (git-fixes). - net/ncsi: Fix AEN HNCDSC packet length (git-fixes). - net/ncsi: Stop monitor if channel times out or is inactive (git-fixes). - net: netem: fix skb length BUG_ON in __skb_to_sgvec (git-fixes). - netns: restrict uevents (bsc#1122982). - net: phy: marvell: Errata for mv88e6390 internal PHYs (networking-stable-19_01_26). - net: phy: mdio_bus: add missing device_del() in mdiobus_register() error handling (networking-stable-19_01_26). - net: phy: Micrel KSZ8061: link failure after cable connect (git-fixes). - netrom: switch to sock timer API (bsc#1051510). - net/rose: fix NULL ax25_cb kernel panic (networking-stable-19_02_01). - net/sched: act_tunnel_key: fix memory leak in case of action replace (networking-stable-19_01_26). - net_sched: refetch skb protocol for each filter (networking-stable-19_01_26). - net: set default network namespace in init_dummy_netdev() (networking-stable-19_02_01). - net: stmmac: Fix a race in EEE enable callback (git-fixes). - net: stmmac: fix broken dma_interrupt handling for multi-queues (git-fixes). - net: stmmac: handle endianness in dwmac4_get_timestamp (git-fixes). - net: stmmac: Use mutex instead of spinlock (git-fixes). - net-sysfs: Fix mem leak in netdev_register_kobject (git-fixes). - net: systemport: Fix WoL with password after deep sleep (networking-stable-19_02_10). - net: thunderx: fix NULL pointer dereference in nic_remove (git-fixes). - nfit: acpi_nfit_ctl(): Check out_obj->type in the right place (bsc#1129547). - nfit/ars: Attempt a short-ARS whenever the ARS state is idle at boot (bsc#1051510). - nfit/ars: Attempt short-ARS even in the no_init_ars case (bsc#1051510). - nfp: bpf: fix ALU32 high bits clearance bug (git-fixes). - nfsd: fix memory corruption caused by readdir (bsc#1127445). - niu: fix missing checks of niu_pci_eeprom_read (bsc#1051510). - ntb_transport: Fix bug with max_mw_size parameter (bsc#1051510). - nvme-fc: reject reconnect if io queue count is reduced to zero (bsc#1128351). - nvme: flush namespace scanning work just before removing namespaces (bsc#1108101). - nvme: kABI fix for scan_lock (bsc#1123882). - nvme: lock NS list changes while handling command effects (bsc#1123882). - nvme-loop: fix kernel oops in case of unhandled command (bsc#1126807). - nvme-multipath: drop optimization for static ANA group IDs (bsc#1113939). - nvme-pci: fix out of bounds access in nvme_cqe_pending (bsc#1127595). - nvme: schedule requeue whenever a LIVE state is entered (bsc#1123105). - of, numa: Validate some distance map rules (bsc#1051510). - of: unittest: Disable interrupt node tests for old world MAC systems (bsc#1051510). - openvswitch: Avoid OOB read when parsing flow nlattrs (bsc#1051510). - openvswitch: fix the incorrect flow action alloc size (bsc#1051510). - openvswitch: Remove padding from packet before L3+ conntrack processing (bsc#1051510). - parport_pc: fix find_superio io compare code, should use equal test (bsc#1051510). - Partially revert "block: fail op_is_write() requests to (bsc#1125252). - pci: add USR vendor id and use it in r8169 and w6692 driver (networking-stable-19_01_22). - pci: designware-ep: dw_pcie_ep_set_msi() should only set MMC bits (bsc#1051510). - pci: endpoint: functions: Use memcpy_fromio()/memcpy_toio() (bsc#1051510). - pci-hyperv: increase HV_VP_SET_BANK_COUNT_MAX to handle 1792 vcpus (bsc#1122822). - pci/pme: Fix hotplug/sysfs remove deadlock in pcie_pme_remove() (bsc#1051510). - pci: qcom: Do not deassert reset GPIO during probe (bsc#1129281). - pcrypt: use format specifier in kobject_add (bsc#1051510). - perf/x86: Add sysfs entry to freeze counters on SMI (bsc#1121805). - perf/x86/intel: Delay memory deallocation until x86_pmu_dead_cpu() (bsc#1121805). - perf/x86/intel: Do not enable freeze-on-smi for PerfMon V1 (bsc#1121805). - perf/x86/intel: Fix memory corruption (bsc#1121805). - perf/x86/intel: Generalize dynamic constraint creation (bsc#1121805). - perf/x86/intel: Implement support for TSX Force Abort (bsc#1121805). - perf/x86/intel: Make cpuc allocations consistent (bsc#1121805). - phy: allwinner: sun4i-usb: poll vbus changes on A23/A33 when driving VBUS (bsc#1051510). - phy: qcom-qmp: Fix failure path in phy_init functions (bsc#1051510). - phy: qcom-qmp: Fix phy pipe clock gating (bsc#1051510). - phy: renesas: rcar-gen3-usb2: fix vbus_ctrl for role sysfs (bsc#1051510). - phy: rockchip-emmc: retry calpad busy trimming (bsc#1051510). - phy: sun4i-usb: add support for missing USB PHY index (bsc#1051510). - phy: tegra: remove redundant self assignment of 'map' (bsc#1051510). - phy: work around 'phys' references to usb-nop-xceiv devices (bsc#1051510). - pinctrl: max77620: Use define directive for max77620_pinconf_param values (bsc#1051510). - pinctrl: meson: fix pull enable register calculation (bsc#1051510). - pinctrl: meson: meson8b: fix the GPIO function for the GPIOAO pins (bsc#1051510). - pinctrl: meson: meson8b: fix the sdxc_a data 1..3 pins (bsc#1051510). - pinctrl: meson: meson8: fix the GPIO function for the GPIOAO pins (bsc#1051510). - pinctrl: msm: fix gpio-hog related boot issues (bsc#1051510). - pinctrl: sh-pfc: emev2: Add missing pinmux functions (bsc#1051510). - pinctrl: sh-pfc: r8a7740: Add missing LCD0 marks to lcd0_data24_1 group (bsc#1051510). - pinctrl: sh-pfc: r8a7740: Add missing REF125CK pin to gether_gmii group (bsc#1051510). - pinctrl: sh-pfc: r8a7778: Fix HSPI pin numbers and names (bsc#1051510). - pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group (bsc#1051510). - pinctrl: sh-pfc: r8a7791: Remove bogus ctrl marks from qspi_data4_b group (bsc#1051510). - pinctrl: sh-pfc: r8a7791: Remove bogus marks from vin1_b_data18 group (bsc#1051510). - pinctrl: sh-pfc: r8a7792: Fix vin1_data18_b pin group (bsc#1051510). - pinctrl: sh-pfc: r8a7794: Remove bogus IPSR9 field (bsc#1051510). - pinctrl: sh-pfc: sh7264: Fix PFCR3 and PFCR0 register configuration (bsc#1051510). - pinctrl: sh-pfc: sh7269: Add missing PCIOR0 field (bsc#1051510). - pinctrl: sh-pfc: sh73a0: Add missing TO pin to tpu4_to3 group (bsc#1051510). - pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups (bsc#1051510). - pinctrl: sh-pfc: sh7734: Add missing IPSR11 field (bsc#1051510). - pinctrl: sh-pfc: sh7734: Fix shifted values in IPSR10 (bsc#1051510). - pinctrl: sh-pfc: sh7734: Remove bogus IPSR10 value (bsc#1051510). - pinctrl: sunxi: a64: Rename function csi0 to csi (bsc#1051510). - pinctrl: sunxi: a64: Rename function ts0 to ts (bsc#1051510). - pinctrl: sunxi: a83t: Fix IRQ offset typo for PH11 (bsc#1051510). - pinctrl: sx150x: handle failure case of devm_kstrdup (bsc#1051510). - pktcdvd: Fix possible Spectre-v1 for pkt_devs (bsc#1051510). - platform/x86: Fix unmet dependency warning for SAMSUNG_Q10 (bsc#1051510). - pm / wakeup: Rework wakeup source timer cancellation (bsc#1051510). - powercap: intel_rapl: add support for Jacobsville (). - powerpc/64s: Clear on-stack exception marker upon exception return (bsc#1071995). - powerpc/livepatch: relax reliable stack tracer checks for first-frame (bsc#1071995). - powerpc/livepatch: small cleanups in save_stack_trace_tsk_reliable() (bsc#1071995). - powerpc/pseries: export timebase register sample in lparcfg (bsc#1127750). - powerpc/pseries/mce: Fix misleading print for TLB mutlihit (bsc#1094244, git-fixes). - powerpc/pseries: Perform full re-add of CPU for topology update post-migration (bsc#1125728). - power: supply: charger-manager: Fix incorrect return value (bsc#1051510). - pptp: dst_release sk_dst_cache in pptp_sock_destruct (git-fixes). - proc/sysctl: do not return ENOMEM on lookup when a table is unregistering (git-fixes). - pseries/energy: Use OF accessor function to read ibm,drc-indexes (bsc#1129080). - ptp: check gettime64 return code in PTP_SYS_OFFSET ioctl (bsc#1051510). - ptp: Fix pass zero to ERR_PTR() in ptp_clock_register (bsc#1051510). - pwm-backlight: Enable/disable the PWM before/after LCD enable toggle (bsc#1051510). - qmi_wwan: add MTU default to qmap network interface (networking-stable-19_01_22). - qmi_wwan: apply SET_DTR quirk to Sierra WP7607 (bsc#1051510). - qmi_wwan: Fix qmap header retrieval in qmimux_rx_fixup (bsc#1051510). - r8169: Add support for new Realtek Ethernet (networking-stable-19_01_22). - r8169: use PCI_VDEVICE macro (networking-stable-19_01_22). - rbd: do not return 0 on unmap if RBD_DEV_FLAG_REMOVING is set (bsc#1125797). - rcu: Fix up pending cbs check in rcu_prepare_for_idle (git fixes (kernel/rcu)). - rcu: Make need_resched() respond to urgent RCU-QS needs (git fixes (kernel/rcu)). - rdma/vmw_pvrdma: Support upto 64-bit PFNs (bsc#1127285). - Refresh patches.suse/scsi-do-not-print-reservation-conflict-for-TEST-UNIT.patch (bsc#1119843) - regulator: act8865: Fix act8600_sudcdc_voltage_ranges setting (bsc#1051510). - regulator: max77620: Initialize values for DT properties (bsc#1051510). - regulator: pv88060: Fix array out-of-bounds access (bsc#1051510). - regulator: pv88080: Fix array out-of-bounds access (bsc#1051510). - regulator: pv88090: Fix array out-of-bounds access (bsc#1051510). - regulator: s2mpa01: Fix step values for some LDOs (bsc#1051510). - regulator: s2mps11: Fix steps for buck7, buck8 and LDO35 (bsc#1051510). - regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA (bsc#1051510). - Remove blacklist of virtio patch so we can install it (bsc#1114585) - Remove patches rejected upstream (). - Revert drm/i915 patches that caused regressions (bsc#1131062) - Revert "drm/rockchip: Allow driver to be shutdown on reboot/kexec" (bsc#1051510). - Revert "Input: elan_i2c - add ACPI ID for touchpad in ASUS Aspire F5-573G" (bsc#1051510). - Revert "ipv4: keep skb->dst around in presence of IP options" (git-fixes). - Revert "openvswitch: Fix template leak in error cases." (bsc#1051510). - Revert "scsi: qla2xxx: Fix NVMe Target discovery" (bsc#1125252). - Revert "sd: disable logical block provisioning if 'lbpme' is not set" This reverts commit e365f138cb9c9c48b710864a9f37a91b4b93381d. Patch not accepted upstream. - Revert the previous merge of drm fixes The branch was merged mistakenly and breaks the build. Revert it. - Revert "xhci: Reset Renesas uPD72020x USB controller for 32-bit DMA issue" (bsc#1120854). - rhashtable: Still do rehash when we get EEXIST (bsc#1051510). - rocker: fix rocker_tlv_put_* functions for KASAN (bsc#1051510). - rpm/kernel-source.changes.old: Really drop old changelogs (bsc#1098995) - rt2800: enable TX_PIN_CFG_RFRX_EN only for MT7620 (bsc#1120902). - rtc: 88pm80x: fix unintended sign extension (bsc#1051510). - rtc: 88pm860x: fix unintended sign extension (bsc#1051510). - rtc: cmos: ignore bogus century byte (bsc#1051510). - rtc: ds1672: fix unintended sign extension (bsc#1051510). - rtc: Fix overflow when converting time64_t to rtc_time (bsc#1051510). - rtc: pm8xxx: fix unintended sign extension (bsc#1051510). - rtnetlink: bring NETDEV_CHANGE_TX_QUEUE_LEN event process back in rtnetlink_event (git-fixes). - rtnetlink: bring NETDEV_CHANGEUPPER event process back in rtnetlink_event (git-fixes). - rtnetlink: bring NETDEV_POST_TYPE_CHANGE event process back in rtnetlink_event (git-fixes). - rtnetlink: check DO_SETLINK_NOTIFY correctly in do_setlink (git-fixes). - rxrpc: bad unlock balance in rxrpc_recvmsg (networking-stable-19_02_10). - s390/cio: Fix how vfio-ccw checks pinned pages (git-fixes). - s390/cpum_cf: Reject request for sampling in event initialization (git-fixes). - s390/early: improve machine detection (git-fixes). - s390/mm: always force a load of the primary ASCE on context switch (git-fixes). - s390/mm: fix addressing exception after suspend/resume (bsc#1125252). - s390/qeth: cancel close_dev work before removing a card (LTC#175898, bsc#1127561). - s390/qeth: conclude all event processing before offlining a card (LTC#175901, bsc#1127567). - s390/qeth: fix use-after-free in error path (bsc#1127534). - s390/qeth: invoke softirqs after napi_schedule() (git-fixes). - s390/smp: Fix calling smp_call_ipl_cpu() from ipl CPU (git-fixes). - s390/smp: fix CPU hotplug deadlock with CPU rescan (git-fixes). - s390/sthyi: Fix machine name validity indication (git-fixes). - sata_rcar: fix deferred probing (bsc#1051510). - sc16is7xx: Fix for multi-channel stall (bsc#1051510). - sched: Do not re-read h_load_next during hierarchical load calculation (bnc#1120909). - sched/wake_q: Document wake_q_add() (bsc#1050549). - sched/wake_q: Fix wakeup ordering for wake_q (bsc#1050549). - sched/wake_q: Reduce reference counting for special users (bsc#1050549). - sch_multiq: fix double free on init failure (bsc#1051510). - scripts/git_sort/git_sort.py: add vfs "fixes" branch - scsi: core: reset host byte in DID_NEXUS_FAILURE case (bsc#1122764). - scsi: csiostor: remove flush_scheduled_work() (bsc#1127363). - scsi: fix queue cleanup race before queue initialization is done (bsc#1125252). - scsi: ibmvscsi: Fix empty event pool access during host removal (bsc#1119019). - scsi: ibmvscsi: Protect ibmvscsi_head from concurrent modificaiton (bsc#1119019). - scsi: libiscsi: fix possible NULL pointer dereference in case of TMF (bsc#1127378). - scsi: libiscsi: Fix race between iscsi_xmit_task and iscsi_complete_task (bsc#1122192). - scsi: lpfc: Add log messages to aid in debugging fc4type discovery issues (bsc#1121317). - scsi: lpfc: Correct MDS loopback diagnostics support (bsc#1121317). - scsi: lpfc: do not set queue->page_count to 0 if pc_sli4_params.wqpcnt is invalid (bsc#1121317). - scsi: lpfc: Fix discovery failure when PLOGI is defered (bsc#1121317). - scsi: lpfc: Fix link state reporting for trunking when adapter is offline (bsc#1121317). - scsi: lpfc: fix remoteport access (bsc#1125252). - scsi: lpfc: remove an unnecessary NULL check (bsc#1121317). - scsi: lpfc: update fault value on successful trunk events (bsc#1121317). - scsi: lpfc: Update lpfc version to 12.0.0.10 (bsc#1121317). - scsi: mpt3sas: Add ioc_<level> logging macros (bsc#1117108). - scsi: mpt3sas: Annotate switch/case fall-through (bsc#1117108). - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT and reply_q_name to %s: (bsc#1117108). - scsi: mpt3sas: Convert logging uses with MPT3SAS_FMT without logging levels (bsc#1117108). - scsi: mpt3sas: Convert mlsleading uses of pr_<level> with MPT3SAS_FMT (bsc#1117108). - scsi: mpt3sas: Convert uses of pr_<level> with MPT3SAS_FMT to ioc_<level> (bsc#1117108). - scsi: mpt3sas: Fix a race condition in mpt3sas_base_hard_reset_handler() (bsc#1117108). - scsi: mpt3sas: Fix indentation (bsc#1117108). - scsi: mpt3sas: Improve kernel-doc headers (bsc#1117108). - scsi: mpt3sas: Introduce struct mpt3sas_nvme_cmd (bsc#1117108). - scsi: mpt3sas: Remove KERN_WARNING from panic uses (bsc#1117108). - scsi: mpt3sas: Remove set-but-not-used variables (bsc#1117108). - scsi: mpt3sas: Remove unnecessary parentheses and simplify null checks (bsc#1117108). - scsi: mpt3sas: Remove unused macro MPT3SAS_FMT (bsc#1117108). - scsi: mpt3sas: Split _base_reset_handler(), mpt3sas_scsih_reset_handler() and mpt3sas_ctl_reset_handler() (bsc#1117108). - scsi: mpt3sas: Swap I/O memory read value back to cpu endianness (bsc#1117108). - scsi: mpt3sas: switch to generic DMA API (bsc#1117108). - scsi: mpt3sas: Use dma_pool_zalloc (bsc#1117108). - scsi: mptsas: Fixup device hotplug for VMWare ESXi (bsc#1129046). - scsi: qla2xxx: Enable FC-NVME on NPIV ports (bsc#1094555). - scsi: qla2xxx: Fix a typo in MODULE_PARM_DESC (bsc#1094555). - scsi: qla2xxx: Fix for FC-NVMe discovery for NPIV port (bsc#1094555). - scsi: qla2xxx: Fix NPIV handling for FC-NVMe (bsc#1094555). - scsi: qla2xxx: Initialize port speed to avoid setting lower speed (bsc#1094555). - scsi: qla2xxx: Modify fall-through annotations (bsc#1094555). - scsi: qla2xxx: Remove unnecessary self assignment (bsc#1094555). - scsi: qla2xxx: Simplify conditional check (bsc#1094555). - scsi: qla2xxx: Update driver version to 10.00.00.12-k (bsc#1094555). - scsi: storvsc: Fix a race in sub-channel creation that can cause panic (). - scsi: sym53c8xx: fix NULL pointer dereference panic in sym_int_sir() (bsc#1125315). - scsi: virtio_scsi: fix pi_bytes{out,in} on 4 KiB block size devices (bsc#1114585). - sctp: add a ceiling to optlen in some sockopts (bnc#1129163). - sctp: improve the events for sctp stream adding (networking-stable-19_02_01). - sctp: improve the events for sctp stream reset (networking-stable-19_02_01). - sd: disable logical block provisioning if 'lbpme' is not set (bsc#1086095 bsc#1078355). - selftests/livepatch: add DYNAMIC_DEBUG config dependency (bsc#1071995). - selftests/livepatch: introduce tests (bsc#1071995). - selinux: always allow mounting submounts (bsc#1051510). - seq_buf: Make seq_buf_puts() null-terminate the buffer (bsc#1051510). - serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart (bsc#1051510). - serial: 8250_pci: Fix number of ports for ACCES serial cards (bsc#1051510). - serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() (bsc#1051510). - serial: fix race between flush_to_ldisc and tty_open (bsc#1051510). - serial: fsl_lpuart: clear parity enable bit when disable parity (bsc#1051510). - serial: fsl_lpuart: fix maximum acceptable baud rate with over-sampling (bsc#1051510). - serial: imx: Update cached mctrl value when changing RTS (bsc#1051510). - serial: uartps: Fix stuck ISR if RX disabled with non-empty FIFO (bsc#1051510). - skge: potential memory corruption in skge_get_regs() (bsc#1051510). - sky2: Disable MSI on Dell Inspiron 1545 and Gateway P-79 (bsc#1051510). - sky2: Increase D3 delay again (bsc#1051510). - smb311: Improve checking of negotiate security contexts (bsc#1051510). - smb3: Enable encryption for SMB3.1.1 (bsc#1051510). - smb3: Fix 3.11 encryption to Windows and handle encrypted smb3 tcon (bsc#1051510). - smb3: Fix SMB3.1.1 guest mounts to Samba (bsc#1051510). - smb3: remove noisy warning message on mount (bsc#1129664). - soc: bcm: brcmstb: Do not leak device tree node reference (bsc#1051510). - soc: fsl: qbman: avoid race in clearing QMan interrupt (bsc#1051510). - soc/tegra: Do not leak device tree node reference (bsc#1051510). - spi: pxa2xx: Setup maximum supported DMA transfer length (bsc#1051510). - spi: ti-qspi: Fix mmap read when more than one CS in use (bsc#1051510). - spi/topcliff_pch: Fix potential NULL dereference on allocation error (bsc#1051510). - splice: do not merge into linked buffers (git-fixes). - staging: comedi: ni_660x: fix missing break in switch statement (bsc#1051510). - staging:iio:ad2s90: Make probe handle spi_setup failure (bsc#1051510). - staging: iio: ad7780: update voltage on read (bsc#1051510). - staging: iio: adc: ad7280a: handle error from __ad7280_read32() (bsc#1051510). - staging: iio: adt7316: allow adt751x to use internal vref for all dacs (bsc#1051510). - staging: iio: adt7316: fix register and bit definitions (bsc#1051510). - staging: iio: adt7316: fix the dac read calculation (bsc#1051510). - staging: iio: adt7316: fix the dac write calculation (bsc#1051510). - staging: rtl8723bs: Fix build error with Clang when inlining is disabled (bsc#1051510). - staging: speakup: Replace strncpy with memcpy (bsc#1051510). - staging: wilc1000: fix to set correct value for 'vif_num' (bsc#1051510). - supported.conf - svm: Add mutex_lock to protect apic_access_page_done on AMD systems (bsc#1129285). - svm: Fix improper check when deactivate AVIC (bsc#1130335). - swiotlb: Add is_swiotlb_active() function (bsc#1120008). - swiotlb: Introduce swiotlb_max_mapping_size() (bsc#1120008). - switchtec: Fix SWITCHTEC_IOCTL_EVENT_IDX_ALL flags overwrite (bsc#1051510). - switchtec: Remove immediate status check after submitting MRPC command (bsc#1051510). - sysfs: Disable lockdep for driver bind/unbind files (bsc#1051510). - tcp: batch tcp_net_metrics_exit (bsc#1122982). - tcp: change txhash on SYN-data timeout (networking-stable-19_01_20). - tcp: handle inet_csk_reqsk_queue_add() failures (git-fixes). - team: avoid complex list operations in team_nl_cmd_options_set() (bsc#1051510). - team: Free BPF filter when unregistering netdev (bsc#1051510). - thermal: bcm2835: Fix crash in bcm2835_thermal_debugfs (bsc#1051510). - thermal: do not clear passive state during system sleep (bsc#1051510). - thermal/drivers/hisi: Encapsulate register writes into helpers (bsc#1051510). - thermal/drivers/hisi: Fix configuration register setting (bsc#1051510). - thermal: generic-adc: Fix adc to temp interpolation (bsc#1051510). - thermal: hwmon: inline helpers when CONFIG_THERMAL_HWMON is not set (bsc#1051510). - thermal/intel_powerclamp: fix truncated kthread name (). - thermal: mediatek: fix register index error (bsc#1051510). - timekeeping: Use proper seqcount initializer (bsc#1051510). - tipc: eliminate KMSAN uninit-value in strcmp complaint (bsc#1051510). - tipc: error path leak fixes in tipc_enable_bearer() (bsc#1051510). - tipc: fix a race condition of releasing subscriber object (bsc#1051510). - tipc: fix bug in function tipc_nl_node_dump_monitor (bsc#1051510). - tipc: fix infinite loop when dumping link monitor summary (bsc#1051510). - tipc: fix RDM/DGRAM connect() regression (bsc#1051510). - tipc: fix uninit-value in tipc_nl_compat_bearer_enable (bsc#1051510). - tipc: fix uninit-value in tipc_nl_compat_doit (bsc#1051510). - tipc: fix uninit-value in tipc_nl_compat_link_reset_stats (bsc#1051510). - tipc: fix uninit-value in tipc_nl_compat_link_set (bsc#1051510). - tipc: fix uninit-value in tipc_nl_compat_name_table_dump (bsc#1051510). - tpm: fix kdoc for tpm2_flush_context_cmd() (bsc#1051510). - tpm: Fix some name collisions with drivers/char/tpm.h (bsc#1051510). - tpm: return a TPM_RC_COMMAND_CODE response if command is not implemented (bsc#1051510). - tpm: Return the actual size when receiving an unsupported command (bsc#1051510). - tpm: suppress transmit cmd error logs when TPM 1.2 is disabled/deactivated (bsc#1051510). - tpm_tis_spi: Pass the SPI IRQ down to the driver (bsc#1051510). - tpm/tpm_crb: Avoid unaligned reads in crb_recv() (bsc#1051510). - tpm/tpm_i2c_infineon: switch to i2c_lock_bus(..., I2C_LOCK_SEGMENT) (bsc#1051510). - tpm: tpm_i2c_nuvoton: use correct command duration for TPM 2.x (bsc#1051510). - tpm: tpm_try_transmit() refactor error flow (bsc#1051510). - tracing: Do not free iter->trace in fail path of tracing_open_pipe() (bsc#1129581). - tracing/uprobes: Fix output for multiple string arguments (bsc#1126495). - tracing: Use strncpy instead of memcpy for string keys in hist triggers (bsc#1129625). - Tree connect for SMB3.1.1 must be signed for non-encrypted shares (bsc#1051510). - tty: ipwireless: Fix potential NULL pointer dereference (bsc#1051510). - tty: serial: samsung: Properly set flags in autoCTS mode (bsc#1051510). - ucc_geth: Reset BQL queue when stopping device (networking-stable-19_02_01). - ucma: fix a use-after-free in ucma_resolve_ip() (bsc#1051510). - uevent: add alloc_uevent_skb() helper (bsc#1122982). - uio: Reduce return paths from uio_write() (bsc#1051510). - Update config files. Remove conditional support for SMB2 and SMB3: - Update patches.arch/s390-sles15-zcrypt-fix-specification-exception.patch (LTC#174936, bsc#1123060, bsc#1123061). - Update patches.fixes/acpi-nfit-Block-function-zero-DSMs.patch (bsc#1051510, bsc#1121789). - Update patches.fixes/acpi-nfit-Fix-command-supported-detection.patch (bsc#1051510, bsc#1121789). Add more detailed bugzilla reference. - uprobes: Fix handle_swbp() vs. unregister() + register() race once more (bsc#1051510). - usb: Add new USB LPM helpers (bsc#1120902). - usb: cdc-acm: fix race during wakeup blocking TX traffic (bsc#1129770). - usb: common: Consider only available nodes for dr_mode (bsc#1129770). - usb: Consolidate LPM checks to avoid enabling LPM twice (bsc#1120902). - usb: core: only clean up what we allocated (bsc#1051510). - usb: dwc3: Correct the logic for checking TRB full in __dwc3_prepare_one_trb() (bsc#1051510). - usb: dwc3: gadget: Disable CSP for stream OUT ep (bsc#1051510). - usb: dwc3: gadget: Fix the uninitialized link_state when udc starts (bsc#1051510). - usb: dwc3: gadget: Handle 0 xfer length for OUT EP (bsc#1051510). - usb: dwc3: gadget: synchronize_irq dwc irq in suspend (bsc#1051510). - usb: gadget: f_hid: fix deadlock in f_hidg_write() (bsc#1129770). - usb: gadget: musb: fix short isoc packets with inventra dma (bsc#1051510). - usb: gadget: Potential NULL dereference on allocation error (bsc#1051510). - usb: gadget: udc: net2272: Fix bitwise and boolean operations (bsc#1051510). - usb: hub: delay hub autosuspend if USB3 port is still link training (bsc#1051510). - usb: mtu3: fix the issue about SetFeature(U1/U2_Enable) (bsc#1051510). - usb: musb: dsps: fix otg state machine (bsc#1051510). - usb: musb: dsps: fix runtime pm for peripheral mode (bsc#1120902). - usbnet: smsc95xx: fix rx packet alignment (bsc#1051510). - usb: phy: am335x: fix race condition in _probe (bsc#1051510). - usb: phy: fix link errors (bsc#1051510). - usb: phy: twl6030-usb: fix possible use-after-free on remove (bsc#1051510). - usb: serial: cp210x: add ID for Ingenico 3070 (bsc#1129770). - usb: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 (bsc#1129770). - usb: serial: mos7720: fix mos_parport refcount imbalance on error path (bsc#1129770). - usb: serial: option: add Telit ME910 ECM composition (bsc#1129770). - usb: serial: option: set driver_info for SIM5218 and compatibles (bsc#1129770). - usb: serial: pl2303: add new PID to support PL2303TB (bsc#1051510). - usb: serial: simple: add Motorola Tetra TPG2200 device id (bsc#1051510). - veth: set peer GSO values (bsc#1051510). - vfio: ccw: fix cleanup if cp_prefetch fails (git-fixes). - vfio: ccw: process ssch with interrupts disabled (git-fixes). - vfs: Add iomap_seek_hole and iomap_seek_data helpers (bsc#1070995). - vfs: Add page_cache_seek_hole_data helper (bsc#1070995). - vfs: in iomap seek_{hole,data}, return -ENXIO for negative offsets (bsc#1070995). - vhost: correctly check the return value of translate_desc() in log_used() (bsc#1051510). - vhost: log dirty page correctly (networking-stable-19_01_26). - vhost/vsock: fix uninitialized vhost_vsock->guest_cid (bsc#1051510). - video: clps711x-fb: release disp device node in probe() (bsc#1051510). - virtio-blk: Consider virtio_max_dma_size() for maximum segment size (bsc#1120008). - virtio: Introduce virtio_max_dma_size() (bsc#1120008). - virtio_net: Do not call free_old_xmit_skbs for xdp_frames (networking-stable-19_02_01). - virtio/s390: avoid race on vcdev->config (git-fixes). - virtio/s390: fix race in ccw_io_helper() (git-fixes). - vmci: Support upto 64-bit PPNs (bsc#1127286). - vsock: cope with memory allocation failure at socket creation time (bsc#1051510). - vxge: ensure data0 is initialized in when fetching firmware version information (bsc#1051510). - vxlan: Fix GRO cells race condition between receive and link delete (git-fixes). - vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() (git-fixes). - vxlan: update skb dst pmtu on tx path (bsc#1123456). - w90p910_ether: remove incorrect __init annotation (bsc#1051510). - watchdog: docs: kernel-api: do not reference removed functions (bsc#1051510). - x86: Add TSX Force Abort CPUID/MSR (bsc#1121805). - x86/a.out: Clear the dump structure initially (bsc#1114279). - x86/apic: Provide apic_ack_irq() (bsc#1122822). - x86/boot/e820: Avoid overwriting e820_table_firmware (bsc#1127154). - x86/boot/e820: Introduce the bootloader provided e820_table_firmware[] table (bsc#1127154). - x86/boot/e820: Rename the e820_table_firmware to e820_table_kexec (bsc#1127154). - x86/cpu: Add Atom Tremont (Jacobsville) (). - x86/CPU/AMD: Set the CPB bit unconditionally on F17h (bsc#1114279). - x86/efi: Allocate e820 buffer before calling efi_exit_boot_service (bsc#1127307). - x86/Hyper-V: Set x2apic destination mode to physical when x2apic is available (bsc#1122822). - x86/kaslr: Fix incorrect i8254 outb() parameters (bsc#1114279). - x86/mce: Improve error message when kernel cannot recover, p2 (bsc#1114279). - x86/mtrr: Do not copy uninitialized gentry fields back to userspace (bsc#1114279). - x86/pkeys: Properly copy pkey state at fork() (bsc#1129366). - x86/platform/UV: Use efi_runtime_lock to serialise BIOS calls (bsc#1125614). - x86: respect memory size limiting via mem= parameter (bsc#1117645). - x86/vdso: Remove obsolete "fake section table" reservation (bsc#1114279). - x86/xen: dont add memory above max allowed allocation (bsc#1117645). - xen, cpu_hotplug: Prevent an out of bounds access (bsc#1065600). - xen: fix dom0 boot on huge systems (bsc#1127836). - xen/manage: do not complain about an empty value in control/sysrq node (bsc#1065600). - xen: remove pre-xen3 fallback handlers (bsc#1065600). - xfs: add option to mount with barrier=0 or barrier=1 (bsc#1088133). - xfs: fix contiguous dquot chunk iteration livelock (bsc#1070995). - xfs: remove filestream item xfs_inode reference (bsc#1127961). - xfs: rewrite xfs_dq_get_next_id using xfs_iext_lookup_extent (bsc#1070995). - xfs: Switch to iomap for SEEK_HOLE / SEEK_DATA (bsc#1070995). - yama: Check for pid death before checking ancestry (bsc#1051510). - yam: fix a missing-check bug (bsc#1051510). - zswap: re-check zswap_is_full() after do zswap_shrink() (bsc#1051510). - x86/uaccess: Do not leak the AC flag into __put_user() value evaluation (bsc#1114279). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1193=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-devel-4.12.14-lp150.12.58.1 kernel-docs-4.12.14-lp150.12.58.1 kernel-docs-html-4.12.14-lp150.12.58.1 kernel-macros-4.12.14-lp150.12.58.1 kernel-source-4.12.14-lp150.12.58.1 kernel-source-vanilla-4.12.14-lp150.12.58.1 - openSUSE Leap 15.0 (x86_64): kernel-debug-4.12.14-lp150.12.58.1 kernel-debug-base-4.12.14-lp150.12.58.1 kernel-debug-base-debuginfo-4.12.14-lp150.12.58.1 kernel-debug-debuginfo-4.12.14-lp150.12.58.1 kernel-debug-debugsource-4.12.14-lp150.12.58.1 kernel-debug-devel-4.12.14-lp150.12.58.1 kernel-debug-devel-debuginfo-4.12.14-lp150.12.58.1 kernel-default-4.12.14-lp150.12.58.1 kernel-default-base-4.12.14-lp150.12.58.1 kernel-default-base-debuginfo-4.12.14-lp150.12.58.1 kernel-default-debuginfo-4.12.14-lp150.12.58.1 kernel-default-debugsource-4.12.14-lp150.12.58.1 kernel-default-devel-4.12.14-lp150.12.58.1 kernel-default-devel-debuginfo-4.12.14-lp150.12.58.1 kernel-kvmsmall-4.12.14-lp150.12.58.1 kernel-kvmsmall-base-4.12.14-lp150.12.58.1 kernel-kvmsmall-base-debuginfo-4.12.14-lp150.12.58.1 kernel-kvmsmall-debuginfo-4.12.14-lp150.12.58.1 kernel-kvmsmall-debugsource-4.12.14-lp150.12.58.1 kernel-kvmsmall-devel-4.12.14-lp150.12.58.1 kernel-kvmsmall-devel-debuginfo-4.12.14-lp150.12.58.1 kernel-obs-build-4.12.14-lp150.12.58.1 kernel-obs-build-debugsource-4.12.14-lp150.12.58.1 kernel-obs-qa-4.12.14-lp150.12.58.1 kernel-syms-4.12.14-lp150.12.58.1 kernel-vanilla-4.12.14-lp150.12.58.1 kernel-vanilla-base-4.12.14-lp150.12.58.1 kernel-vanilla-base-debuginfo-4.12.14-lp150.12.58.1 kernel-vanilla-debuginfo-4.12.14-lp150.12.58.1 kernel-vanilla-debugsource-4.12.14-lp150.12.58.1 kernel-vanilla-devel-4.12.14-lp150.12.58.1 kernel-vanilla-devel-debuginfo-4.12.14-lp150.12.58.1 References: https://www.suse.com/security/cve/CVE-2019-2024.html https://www.suse.com/security/cve/CVE-2019-3819.html https://www.suse.com/security/cve/CVE-2019-7308.html https://www.suse.com/security/cve/CVE-2019-8912.html https://www.suse.com/security/cve/CVE-2019-8980.html https://www.suse.com/security/cve/CVE-2019-9213.html https://bugzilla.suse.com/1046305 https://bugzilla.suse.com/1046306 https://bugzilla.suse.com/1050549 https://bugzilla.suse.com/1051510 https://bugzilla.suse.com/1056787 https://bugzilla.suse.com/1060463 https://bugzilla.suse.com/1063638 https://bugzilla.suse.com/1065600 https://bugzilla.suse.com/1070995 https://bugzilla.suse.com/1071995 https://bugzilla.suse.com/1078355 https://bugzilla.suse.com/1082943 https://bugzilla.suse.com/1083548 https://bugzilla.suse.com/1083647 https://bugzilla.suse.com/1086095 https://bugzilla.suse.com/1086282 https://bugzilla.suse.com/1088133 https://bugzilla.suse.com/1094244 https://bugzilla.suse.com/1094555 https://bugzilla.suse.com/1098995 https://bugzilla.suse.com/1100132 https://bugzilla.suse.com/1103429 https://bugzilla.suse.com/1106811 https://bugzilla.suse.com/1107078 https://bugzilla.suse.com/1107665 https://bugzilla.suse.com/1108101 https://bugzilla.suse.com/1110096 https://bugzilla.suse.com/1113042 https://bugzilla.suse.com/1113399 https://bugzilla.suse.com/1113722 https://bugzilla.suse.com/1113939 https://bugzilla.suse.com/1114279 https://bugzilla.suse.com/1114585 https://bugzilla.suse.com/1117108 https://bugzilla.suse.com/1117645 https://bugzilla.suse.com/1119019 https://bugzilla.suse.com/1119086 https://bugzilla.suse.com/1119843 https://bugzilla.suse.com/1120008 https://bugzilla.suse.com/1120601 https://bugzilla.suse.com/1120854 https://bugzilla.suse.com/1120902 https://bugzilla.suse.com/1120909 https://bugzilla.suse.com/1121317 https://bugzilla.suse.com/1121789 https://bugzilla.suse.com/1121805 https://bugzilla.suse.com/1122192 https://bugzilla.suse.com/1122764 https://bugzilla.suse.com/1122822 https://bugzilla.suse.com/1122982 https://bugzilla.suse.com/1123060 https://bugzilla.suse.com/1123061 https://bugzilla.suse.com/1123105 https://bugzilla.suse.com/1123161 https://bugzilla.suse.com/1123456 https://bugzilla.suse.com/1123882 https://bugzilla.suse.com/1124055 https://bugzilla.suse.com/1124235 https://bugzilla.suse.com/1124974 https://bugzilla.suse.com/1124975 https://bugzilla.suse.com/1124976 https://bugzilla.suse.com/1124978 https://bugzilla.suse.com/1124979 https://bugzilla.suse.com/1124980 https://bugzilla.suse.com/1124981 https://bugzilla.suse.com/1124982 https://bugzilla.suse.com/1124984 https://bugzilla.suse.com/1125125 https://bugzilla.suse.com/1125252 https://bugzilla.suse.com/1125315 https://bugzilla.suse.com/1125342 https://bugzilla.suse.com/1125614 https://bugzilla.suse.com/1125728 https://bugzilla.suse.com/1125780 https://bugzilla.suse.com/1125797 https://bugzilla.suse.com/1125799 https://bugzilla.suse.com/1125800 https://bugzilla.suse.com/1125907 https://bugzilla.suse.com/1125947 https://bugzilla.suse.com/1126131 https://bugzilla.suse.com/1126209 https://bugzilla.suse.com/1126356 https://bugzilla.suse.com/1126389 https://bugzilla.suse.com/1126393 https://bugzilla.suse.com/1126476 https://bugzilla.suse.com/1126480 https://bugzilla.suse.com/1126481 https://bugzilla.suse.com/1126488 https://bugzilla.suse.com/1126495 https://bugzilla.suse.com/1126555 https://bugzilla.suse.com/1126579 https://bugzilla.suse.com/1126740 https://bugzilla.suse.com/1126789 https://bugzilla.suse.com/1126790 https://bugzilla.suse.com/1126802 https://bugzilla.suse.com/1126803 https://bugzilla.suse.com/1126804 https://bugzilla.suse.com/1126805 https://bugzilla.suse.com/1126806 https://bugzilla.suse.com/1126807 https://bugzilla.suse.com/1127042 https://bugzilla.suse.com/1127062 https://bugzilla.suse.com/1127082 https://bugzilla.suse.com/1127154 https://bugzilla.suse.com/1127285 https://bugzilla.suse.com/1127286 https://bugzilla.suse.com/1127307 https://bugzilla.suse.com/1127363 https://bugzilla.suse.com/1127378 https://bugzilla.suse.com/1127445 https://bugzilla.suse.com/1127493 https://bugzilla.suse.com/1127494 https://bugzilla.suse.com/1127495 https://bugzilla.suse.com/1127496 https://bugzilla.suse.com/1127497 https://bugzilla.suse.com/1127498 https://bugzilla.suse.com/1127534 https://bugzilla.suse.com/1127561 https://bugzilla.suse.com/1127567 https://bugzilla.suse.com/1127595 https://bugzilla.suse.com/1127603 https://bugzilla.suse.com/1127682 https://bugzilla.suse.com/1127731 https://bugzilla.suse.com/1127750 https://bugzilla.suse.com/1127836 https://bugzilla.suse.com/1127961 https://bugzilla.suse.com/1128094 https://bugzilla.suse.com/1128166 https://bugzilla.suse.com/1128351 https://bugzilla.suse.com/1128451 https://bugzilla.suse.com/1128895 https://bugzilla.suse.com/1129046 https://bugzilla.suse.com/1129080 https://bugzilla.suse.com/1129163 https://bugzilla.suse.com/1129179 https://bugzilla.suse.com/1129181 https://bugzilla.suse.com/1129182 https://bugzilla.suse.com/1129183 https://bugzilla.suse.com/1129184 https://bugzilla.suse.com/1129205 https://bugzilla.suse.com/1129276 https://bugzilla.suse.com/1129281 https://bugzilla.suse.com/1129284 https://bugzilla.suse.com/1129285 https://bugzilla.suse.com/1129291 https://bugzilla.suse.com/1129292 https://bugzilla.suse.com/1129293 https://bugzilla.suse.com/1129294 https://bugzilla.suse.com/1129295 https://bugzilla.suse.com/1129296 https://bugzilla.suse.com/1129326 https://bugzilla.suse.com/1129327 https://bugzilla.suse.com/1129330 https://bugzilla.suse.com/1129363 https://bugzilla.suse.com/1129366 https://bugzilla.suse.com/1129497 https://bugzilla.suse.com/1129519 https://bugzilla.suse.com/1129543 https://bugzilla.suse.com/1129547 https://bugzilla.suse.com/1129551 https://bugzilla.suse.com/1129581 https://bugzilla.suse.com/1129625 https://bugzilla.suse.com/1129664 https://bugzilla.suse.com/1129739 https://bugzilla.suse.com/1129770 https://bugzilla.suse.com/1129923 https://bugzilla.suse.com/1130130 https://bugzilla.suse.com/1130154 https://bugzilla.suse.com/1130335 https://bugzilla.suse.com/1130336 https://bugzilla.suse.com/1130337 https://bugzilla.suse.com/1130338 https://bugzilla.suse.com/1130425 https://bugzilla.suse.com/1130427 https://bugzilla.suse.com/1130518 https://bugzilla.suse.com/1131062 https://bugzilla.suse.com/824948

1 0

openSUSE-RU-2019:1194-1: moderate: Recommended update for cmake
by maintenance＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Recommended Update: Recommended update for cmake ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1194-1 Rating: moderate References: #1129024 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cmake fixes the following issues: - Add support for %cmake_build macro for compat with newer systems (bsc#1129024) - Allow definition of builddir and builder to be overridable - Revert removal of CMAKE_INSTALL_LIBDIR declaration from the - Resolve the error when cmake_minimum_required() is not set Makefile: Fix compilation after parent commit was backported descriptions and summaries. See the * CMP0022: Fix version documented to support * Add a %make_jobs macro with verbose argument - Add ppc64le to FindJNI - updated cmake.macros to include installation path for cmake modules This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1194=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): cmake-3.5.2-4.3.1 cmake-debuginfo-3.5.2-4.3.1 cmake-debugsource-3.5.2-4.3.1 - openSUSE Leap 42.3 (x86_64): cmake-gui-3.5.2-4.3.1 cmake-gui-debuginfo-3.5.2-4.3.1 cmake-gui-debugsource-3.5.2-4.3.1 cmake-man-3.5.2-4.3.1 References: https://bugzilla.suse.com/1129024

1 0

openSUSE-RU-2019:1195-1: moderate: Recommended update for mariadb-connector-c
by maintenance＠opensuse.org 12 Apr '19

12 Apr '19

openSUSE Recommended Update: Recommended update for mariadb-connector-c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1195-1 Rating: moderate References: #1126088 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mariadb-connector-c fixes the following issues: - Bugfix: libmariadb.pc installed in seemingly wrong location (bsc#1126088) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1195=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libmariadb-devel-3.0.7-lp150.7.1 libmariadb-devel-debuginfo-3.0.7-lp150.7.1 libmariadb3-3.0.7-lp150.7.1 libmariadb3-debuginfo-3.0.7-lp150.7.1 libmariadb_plugins-3.0.7-lp150.7.1 libmariadb_plugins-debuginfo-3.0.7-lp150.7.1 libmariadbprivate-3.0.7-lp150.7.1 libmariadbprivate-debuginfo-3.0.7-lp150.7.1 mariadb-connector-c-debugsource-3.0.7-lp150.7.1 - openSUSE Leap 15.0 (x86_64): libmariadb3-32bit-3.0.7-lp150.7.1 libmariadb3-32bit-debuginfo-3.0.7-lp150.7.1 References: https://bugzilla.suse.com/1126088

1 0

openSUSE-RU-2019:1192-1: moderate: Recommended update for yast2-packager
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for yast2-packager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1192-1 Rating: moderate References: #1082369 #1119564 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-packager fixes the following issues: - Changing repo URL has been ignored (bsc#1119564) - Added warning in case the NTP configuration was modified but the package is not selected to be installed (bsc#1082369) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1192=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-packager-4.0.73-lp150.2.16.1 References: https://bugzilla.suse.com/1082369 https://bugzilla.suse.com/1119564

1 0

openSUSE-RU-2019:1191-1: moderate: Recommended update for apparmor
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1191-1 Rating: moderate References: #1120279 #1125439 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for apparmor fixes the following issues: - Add /proc/pid/tcp and /proc/pid/tcp6 entries to the apparmor profile. (bsc#1125439) - allow network access and notify file creation/access (bsc#1120279) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1191=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_apparmor-2.12.2-lp150.6.14.1 apache2-mod_apparmor-debuginfo-2.12.2-lp150.6.14.1 apparmor-debugsource-2.12.2-lp150.6.14.1 apparmor-parser-2.12.2-lp150.6.14.1 apparmor-parser-debuginfo-2.12.2-lp150.6.14.1 libapparmor-debugsource-2.12.2-lp150.6.14.1 libapparmor-devel-2.12.2-lp150.6.14.1 libapparmor1-2.12.2-lp150.6.14.1 libapparmor1-debuginfo-2.12.2-lp150.6.14.1 pam_apparmor-2.12.2-lp150.6.14.1 pam_apparmor-debuginfo-2.12.2-lp150.6.14.1 perl-apparmor-2.12.2-lp150.6.14.1 perl-apparmor-debuginfo-2.12.2-lp150.6.14.1 python3-apparmor-2.12.2-lp150.6.14.1 python3-apparmor-debuginfo-2.12.2-lp150.6.14.1 ruby-apparmor-2.12.2-lp150.6.14.1 ruby-apparmor-debuginfo-2.12.2-lp150.6.14.1 - openSUSE Leap 15.0 (x86_64): libapparmor1-32bit-2.12.2-lp150.6.14.1 libapparmor1-32bit-debuginfo-2.12.2-lp150.6.14.1 pam_apparmor-32bit-2.12.2-lp150.6.14.1 pam_apparmor-32bit-debuginfo-2.12.2-lp150.6.14.1 - openSUSE Leap 15.0 (noarch): apparmor-abstractions-2.12.2-lp150.6.14.1 apparmor-docs-2.12.2-lp150.6.14.1 apparmor-parser-lang-2.12.2-lp150.6.14.1 apparmor-profiles-2.12.2-lp150.6.14.1 apparmor-utils-2.12.2-lp150.6.14.1 apparmor-utils-lang-2.12.2-lp150.6.14.1 References: https://bugzilla.suse.com/1120279 https://bugzilla.suse.com/1125439

1 0

openSUSE-RU-2019:1188-1: moderate: Recommended update for libtirpc
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for libtirpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1188-1 Rating: moderate References: #1120689 #1126096 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libtirpc fixes the following issues: - Fix a yp_bind_client_create_v3: RPC: Unknown host error (bsc#1126096). - add an option to enforce connection via protocol version 2 first (bsc#1120689). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1188=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libtirpc-debugsource-1.0.2-lp150.7.1 libtirpc-devel-1.0.2-lp150.7.1 libtirpc-netconfig-1.0.2-lp150.7.1 libtirpc3-1.0.2-lp150.7.1 libtirpc3-debuginfo-1.0.2-lp150.7.1 - openSUSE Leap 15.0 (x86_64): libtirpc3-32bit-1.0.2-lp150.7.1 libtirpc3-32bit-debuginfo-1.0.2-lp150.7.1 References: https://bugzilla.suse.com/1120689 https://bugzilla.suse.com/1126096

1 0

openSUSE-RU-2019:1187-1: moderate: Recommended update for deepin-music-player
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for deepin-music-player ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1187-1 Rating: moderate References: #1131464 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for deepin-music-player fixes the following issues: - Make lyrics work (boo#1131464). * Add libnetease-meta-search.so in filelist, it is not a developement file Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1187=1 Package List: - openSUSE Leap 15.0 (x86_64): deepin-music-libnetease-meta-search-3.1.7.2-lp150.4.3.1 deepin-music-libnetease-meta-search-debuginfo-3.1.7.2-lp150.4.3.1 deepin-music-player-3.1.7.2-lp150.4.3.1 deepin-music-player-debuginfo-3.1.7.2-lp150.4.3.1 deepin-music-player-debugsource-3.1.7.2-lp150.4.3.1 libdbusextended-qt5-1-3.1.7.2-lp150.4.3.1 libdbusextended-qt5-1-debuginfo-3.1.7.2-lp150.4.3.1 libdbusextended-qt5-devel-3.1.7.2-lp150.4.3.1 libdmusic1-3.1.7.2-lp150.4.3.1 libdmusic1-debuginfo-3.1.7.2-lp150.4.3.1 libmpris-qt5-1-3.1.7.2-lp150.4.3.1 libmpris-qt5-1-debuginfo-3.1.7.2-lp150.4.3.1 libmpris-qt5-devel-3.1.7.2-lp150.4.3.1 References: https://bugzilla.suse.com/1131464

1 0

openSUSE-SU-2019:1190-1: important: Security update for apache2
by opensuse-security＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1190-1 Rating: important References: #1131233 #1131237 #1131239 #1131241 #1131245 Cross-References: CVE-2019-0196 CVE-2019-0197 CVE-2019-0211 CVE-2019-0217 CVE-2019-0220 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for apache2 fixes the following issues: * CVE-2019-0220: The Apache HTTP server did not use a consistent strategy for URL normalization throughout all of its components. In particular, consecutive slashes were not always collapsed. Attackers could potentially abuse these inconsistencies to by-pass access control mechanisms and thus gain unauthorized access to protected parts of the service. [bsc#1131241] * CVE-2019-0217: A race condition in Apache's "mod_auth_digest" when running in a threaded server could have allowed users with valid credentials to authenticate using another username, bypassing configured access control restrictions. [bsc#1131239] * CVE-2019-0211: A flaw in the Apache HTTP Server allowed less-privileged child processes or threads to execute arbitrary code with the privileges of the parent process. Attackers with control over CGI scripts or extension modules run by the server could have abused this issue to potentially gain super user privileges. [bsc#1131233] * CVE-2019-0197: When HTTP/2 support was enabled in the Apache server for a 'http' host or H2Upgrade was enabled for h2 on a 'https' host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration and crash. This issue could have been abused to mount a denial-of-service attack. Servers that never enabled the h2 protocol or that only enabled it for https: and did not configure the "H2Upgrade on" are unaffected. [bsc#1131245] * CVE-2019-0196: Through specially crafted network input the Apache's http/2 request handler could be lead to access previously freed memory while determining the method of a request. This resulted in the request being misclassified and thus being processed incorrectly. [bsc#1131237] This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1190=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-45.1 apache2-debuginfo-2.4.23-45.1 apache2-debugsource-2.4.23-45.1 apache2-devel-2.4.23-45.1 apache2-event-2.4.23-45.1 apache2-event-debuginfo-2.4.23-45.1 apache2-example-pages-2.4.23-45.1 apache2-prefork-2.4.23-45.1 apache2-prefork-debuginfo-2.4.23-45.1 apache2-utils-2.4.23-45.1 apache2-utils-debuginfo-2.4.23-45.1 apache2-worker-2.4.23-45.1 apache2-worker-debuginfo-2.4.23-45.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-45.1 References: https://www.suse.com/security/cve/CVE-2019-0196.html https://www.suse.com/security/cve/CVE-2019-0197.html https://www.suse.com/security/cve/CVE-2019-0211.html https://www.suse.com/security/cve/CVE-2019-0217.html https://www.suse.com/security/cve/CVE-2019-0220.html https://bugzilla.suse.com/1131233 https://bugzilla.suse.com/1131237 https://bugzilla.suse.com/1131239 https://bugzilla.suse.com/1131241 https://bugzilla.suse.com/1131245

1 0

openSUSE-RU-2019:1185-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1185-1 Rating: moderate References: #1127891 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dracut fixes the following issues: - Check SUSE kernel module dependencies recursively (bsc#1127891) - Avoid "Failed to chown ... Operation not permitted" when run from non-root, by not copying xattrs. (osc#1092178) - Handle non-versioned dependency in purge-kernels. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1185=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): dracut-044.2-38.1 dracut-debuginfo-044.2-38.1 dracut-debugsource-044.2-38.1 dracut-fips-044.2-38.1 dracut-tools-044.2-38.1 References: https://bugzilla.suse.com/1127891

1 0

openSUSE-RU-2019:1186-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 11 Apr '19

11 Apr '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1186-1 Rating: moderate References: #1049126 #1082766 #1095177 #1095729 #1101110 #1101348 #1123814 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Assemble: prevent segfault with faulty "best" devices (bsc#1082766, bsc#1095729) - Bugfix: MD RAID grow doesn't start for size larger than 2147483647 K (bsc#1095177) - Bugfix: Wrong size after grow of IMSM Volume (bsc#1101110) - Bugfix: LICENSE file gets now installed in the correct directory. - Bugfix: Device names were truncated when calling 'mdadm --detail --export' (bsc#1123814) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1186=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): mdadm-4.0-lp150.8.3.1 mdadm-debuginfo-4.0-lp150.8.3.1 mdadm-debugsource-4.0-lp150.8.3.1 References: https://bugzilla.suse.com/1049126 https://bugzilla.suse.com/1082766 https://bugzilla.suse.com/1095177 https://bugzilla.suse.com/1095729 https://bugzilla.suse.com/1101110 https://bugzilla.suse.com/1101348 https://bugzilla.suse.com/1123814

1 0

openSUSE-RU-2019:1184-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 10 Apr '19

10 Apr '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1184-1 Rating: moderate References: #1125110 #1128560 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for polkit-default-privs fixes the following issues: - add renamed wifi-scan -> wifi.scan action (bsc#1128560) - relax change-own-user-data action in the restrictive profile (bsc#1125110) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1184=1 Package List: - openSUSE Leap 15.0 (noarch): polkit-default-privs-13.2-lp150.8.22.1 References: https://bugzilla.suse.com/1125110 https://bugzilla.suse.com/1128560

1 0

openSUSE-RU-2019:1181-1: moderate: Recommended update for guile
by maintenance＠opensuse.org 10 Apr '19

10 Apr '19

openSUSE Recommended Update: Recommended update for guile ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1181-1 Rating: moderate References: #1110085 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for guile fixes the following issues: - Fix use of the "ja_JP.sjis" locale. (bsc#1110085) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1181=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): guile-2.0.9-12.3.1 guile-debuginfo-2.0.9-12.3.1 guile-debugsource-2.0.9-12.3.1 guile-devel-2.0.9-12.3.1 guile-modules-2_0-2.0.9-12.3.1 libguile-2_0-22-2.0.9-12.3.1 libguile-2_0-22-debuginfo-2.0.9-12.3.1 libguilereadline-v-18-18-2.0.9-12.3.1 libguilereadline-v-18-18-debuginfo-2.0.9-12.3.1 References: https://bugzilla.suse.com/1110085

1 0

openSUSE-RU-2019:1183-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 10 Apr '19

10 Apr '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1183-1 Rating: moderate References: #1082883 #1094208 #1102915 #1107270 #1114840 #1121272 #1121808 #974108 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for pacemaker provides the following fixes: - cts: Do not require nodes to be specified if only listing tests. (bsc#1114840) - cts: Temporarily disable any enabled cluster services when running remote tests. - cts: Count service as enabled only if it is explicitly enabled. - cts: Ignore monitor failures when testing remote node fencing. - cts: Lower remote connection failure detection time. - cts: Clear constraints on cluster nodes. (bsc#1121272) - cts: Resume any possibly frozen pacemaker_remoted when cleaning up the test. (bsc#1121272) - cts: Simulate failure of pacemaker_remoted by freezing it with SIGSTOP. (bsc#1121272) - cts-exec: Run the tests for the other resource classes even without python systemd bindings. (bsc#1121808) - cts-scheduler: Avoid unsupported usage of requires. - fenced: Handle fencing requested with nodeid by using the membership cache of known nodes. (bsc#1094208, bsc#1107270, bsc#974108) - controld: Make it possible to manually confirm unseen nodes are down. (bsc#1094208, bsc#1107270) - controld: Avoid memory leak when synthesizing failure. - spec: Install /etc/pacemaker directory for storing authkey file. (bsc#1082883) - tools: Improve error messages from crm_resource --move. - tools: Use output redirection correctly in crm_standby. - tools: Handle multiple values properly in crm_attribute. - tools: Fix a bash portability issue in crm_failcount. - tools: cibsecret --help/--version does not require cluster to be running. (bsc#1102915) - scheduler: Improve failed op message. - controller,scheduler: Guard hash table deletes. - controller: Do not abort after delay if the instance is no longer DC. - libcrmservice: Do not consider a canceled recurring operation as failed. - libcrmservice: Find absolute paths when used with "service:". - libcrmservice: Separate LSB-specific code into own source files. - execd: Avoid memory leak when testing remote key. - execd: Handle systemd actions correctly when used with "service:". - libcrmcommon,pacemakerd: Kernel task name is at most 15 characters. - io.c: restore -Werror buildability, put conversion specifier last. - libcrmcommon: Avoid memory leak on failed IPC send. - libcrmcommon: Improve connection loss message. - daemons: Improve connection loss messages. - pacemaker_remote: Correct documentation URL in systemd unit file. - libcrmcommon: Improve checking of file/directory writability. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1183=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libpacemaker-devel-1.1.18+20180430.b12c320f5-lp150.2.3.1 libpacemaker3-1.1.18+20180430.b12c320f5-lp150.2.3.1 libpacemaker3-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-cli-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-cli-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-debugsource-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-remote-1.1.18+20180430.b12c320f5-lp150.2.3.1 pacemaker-remote-debuginfo-1.1.18+20180430.b12c320f5-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): pacemaker-cts-1.1.18+20180430.b12c320f5-lp150.2.3.1 References: https://bugzilla.suse.com/1082883 https://bugzilla.suse.com/1094208 https://bugzilla.suse.com/1102915 https://bugzilla.suse.com/1107270 https://bugzilla.suse.com/1114840 https://bugzilla.suse.com/1121272 https://bugzilla.suse.com/1121808 https://bugzilla.suse.com/974108

1 0

openSUSE-RU-2019:1182-1: moderate: Recommended update for remmina
by maintenance＠opensuse.org 10 Apr '19

10 Apr '19

openSUSE Recommended Update: Recommended update for remmina ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1182-1 Rating: moderate References: #1103557 #1117402 #1123452 #1125549 #1129319 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for remmina to version 1.3.4 fixes the following issues: - Update to new upstream release 1.3.4 * Updated to use core18 and gnome-3-28-1804 !1797 * Snap: Build snap in CI and publish to the edge channel for builds against master !1810 * Resolve "SSH public key cannot be imported: Access denied for 'none'. Authentication that can continie: publickey" !1811 * snap: Ensure the icon is installed !1812 - Update to new upstream release 1.3.3 * Fix “Utranslated” typo + XHTML 1.0 strictness + move div CSS rule in style block * Revert autoclosed script tags. It seems to be badly surported * Remmina connection window refactoring * Adding Serial and parallel ports sharing * RemminaMain window refactoring - Removing deprecated functions. * Fix #1836 implementing the correct message panel when authenticating * Make ssh tunnel pwd user manageable and public key import * Fix Yes/No inversion * Updated translations: de, zh_CN, it, fr, tr, da, it - Update to version 1.3.2 (bsc#1123452, bsc#1103557) * Change rcw size allocation wait algorithm, see issue #1809 * Fix a couple of VNCI crashes, see issue #1821 * Fix spice authentication, issue #1820 * Update translations script fixes * Add a missing end point in an SSH error message * Translation Updates: fr, it * Cosmetic fixes - Update to version 1.3.1 * fixed several typograpic errors * fixed VNC clipboard bug * Translations updated: en, de, tr, ru, it, es * Translations for SSH error messages * Performance improvement * Improved CSS Styles * rcw fixes * fix scrolling in fullscreen mode * fixed several issues - Update to version 1.3.0 * Use window resolution * rcw_preopen complete * RDP: new global parameter rdp_map_keycode * Use decimal instead of hex on rdp keycode map * Updated translations * Adding language detection * Auth panel widget placement * CSS modifications to adapt to stock Gnome and Gtk themes * Updated CSS to have black background in fullscreen * Gtk deprecation and CSS restzling * Gtk icon cache update during install phase * Correctly set focus after rcw_preopen * Icons and gtk fixes for rcw_reopen * Deprecates dynamic_resolution_width and height cfg params * Disable glyph cache by default * Fix crash when showing password panel * Fix crash when showing password panel * allow closing tab after error message panel is shown * Remove deprecated floating toolbar toplevel window * Fixed missing icons * Make menu items paintable by the application * Open connection window before connecting * Prevent toolbar signals while reconfiguring toolbar * Update toolbar button handling * Added xrdp friendly options, the "Relax Order Checks" and "Glyph Cache" options are required for connections to xrdp servers (boo#1125549, boo#1129319) * RDP fixes: remove redundant rfi->width/rfi->height and more * RDP: correctly destroy rfi->surface during a desktop resize * RDP: move gdi_resize() to a better place * RDP: remove unneeded OrderSupport struct init * VNC: Fix possible crash during connection * Search box clear icon * Updated CONTIBUTING.md and README.md * Updated sponsor list * Updated wiki URLs * Updating coyright for year 2019 - Update to version 1.2.32.1 * Add desktop-gnome-platform and fix themes in SNAP * Implement smartcard name setting * man+help: elaborate on file types of -connect and -edit cmd line options * RDP: add FREERDP_ERROR_SERVER_DENIED_CONNECTION message * Removing X11Forwarding code as it is wrong and causing issues * Updated turkish translation - New plugin remmina-plugin-st (simple terminal) - Update to version 1.2.32 * Avoid to save last_success property if stats are not enabled. * GW auth data was saved in the server auth data. * Do not register socket plugins when X11 is not available. * Screenshot enhancements. * RDP GW authentication. * Adding global preference for search bar visibility. * Allow wayland backend again when GTK >= 3.22.27. * Added turkish translation. * Add option to honour https_proxy and http_proxy environment variable. * Force program name to app id. * Printing builds flags with remmina --full-version command option. * Fix KB grabbing when switching workspace. * Dealing correcthly with some deprecations, getting rid of most of G_GNUC_BEGIN_IGNORE_DEPRECATIONS. * Improving file type hadling. * Adding error check on remmina_pref_save. * Many bug fixing as usual. - Update to version 1.2.31.4 * Enhancements - Improving file type hadling. * Fixed bugs - Fix KB grabbing when switching workspace. - Fix some possible crashes when reading a remminafile. - Fixes a crash deleting XDMCP profile. - Fixing libssh deprecations. - Update to 1.2.31.3 * Enhancements - Implement send ctrl+alt+fn keys. * Fixed bugs - Do not send stats if the remmina.pref file is read. - cmake: include libssh_threads only when available. - Set program class to REMMINA_APP_ID - Use noun phrasing in summary. - New package remmina-kiosk is now available - Update to version 1.2.31.2 * Fixed bugs - Cannot minimize in fullscreen mode. - Crash with the RDP plugin. - Missing manual pages - Update to version 1.2.31 * Notables changes - Custom color schemes per profile for the SSH plugin - Flatpak updates and fixes - Kiosk mode with integration in the login manager - New Icons - SFTP tool password fixes - Several fixes around RDP and compilations issues (bsc#1117402) - Update to version 1.2.30.1 * Enhancements: - Move search bar below the header bar #1648 - Failure to link with lld on OpenBSD #1604 - Add search toggle #1653 (antenore) - Move search bar below the header. #1649 (antenore) * Fixed bugs: - RDP - Remmina process dies after entering password and clicking "OK" #1643 - Fixing segmentation fault due to setting name NULL #1650 (antenore) - Update to version 1.2.30 * Enhancements: - HiDPI - Elements spacing in the headerbar is too low #1628 - Failure to link with lld on OpenBSD #1604 - RDP - Implement xfreerdp like --no-fastpath option #1596 - 'remmina -c' accepting only configs with .remmina extension. #1454 - [Feature Request] Add SPICE Native WebDAV shared folder support #1273 - Register and support opening rdp files directly #1105 - Panel Icon almost invisible #1006 - Rename UNIQUE_APPNAME to REMMINA_APP_ID and use it wherever possible #1637 (larchunix) - Update new logo from Ura Design #1636 (antenore) - Increase headerbar elements spacing #1629 (antenore) - Support for "gatewayaccesstoken" (aka PAA) and "authentication level" RDP file properties #1621 (p-pautov) - Autodetect missing H264 on libfreerdp #1617 (giox069) - Project folder refactoring following the GNOME guidelines. 2nd batch. #1600 (antenore) - RDP: option to disable fast-path, fixes #1596 #1597 (giox069) - Term enhance - Color scheme import #1585 (antenore) * Fixed bugs: - Assert in remmina_pref_save #1570 - Minor graphical issue on Ubuntu 18.04 with communitheme #1546 - Security Bug: Unchecked call to gcry_control #830 - "Floating point exception" while connecting to Windows 10 machine #681 * Closed issues: - undefined symbol: vte_terminal_copy_clipboard_format #1591 - RDP: Dynamic resolution updates don't work anymore after updating freerdp from 2.0.0_rc1 -> 2.0.0_rc2 #1576 - Statrtup issues remmina / gnome / wayland / opensuse leap 15 beta #1558 - VNCI connection not working! #1502 - Highlight to copy - SSH #1434 - Password not saving - encrypting *.remmina connection files #1423 - Remmina crashes when sharing local printers and connecting through gateway #1405 - Remmina lock screen when i use it to connect to Win10. #1396 - Windows 10 BSOD on file copy #1019 - ALT + F4 closes Remina remote Window #125 * Merged pull requests: - Update italian translation #1631 (giox069) - Updated French po file #1630 (DevDef) - Write newline instead of return #1626 (weberhofer) - Updated German Translation #1624 (weberhofer) - Fix libssh deprecations in NX plugin #1613 (larchunix) - Headerbar spacing fixes #1607 (antenore) - Place headerbar in the main container. Fixes #1546 #1606 (antenore) - File list and indicator icon optimizations #1603 (giox069) - Project folder refactoring following the GNOME guidelines. - SPICE: add support for ssh tunnelling #1595 (larchunix) - Clang LLVM coverage flags #1594 (antenore) - GTK deprecation fixes #1592 (larchunix) - Undo commit 5b4e7f1 and change VNCI plugin description #1586 (giox069) - Fix a bunch of warnings #1583 (larchunix) - build: make appindicator include consistent with pkg-config flags #1582 (larchunix) - Add openSUSE info and instructions to README #1581 (jubalh) - Libssh has removed red.libssh.org #1574 (antenore) - periodic_usage_stats_uuid_prefix default value #1572 (antenore) - Use string constant #1569 (amtlib-dot-dll) - CMake cleanup #1568 (larchunix) - Update to version 1.2.0-rcgit.28 * Update Czech translation #1555 (AsciiWolf) * Switch back to x11 GTK backend under Wayland #1554 (giox069) * TCP_USER_TIMEOUT is in milliseconds #1553 (antenore) * Disable VNCI plugin #1550 (giox069) * Fix typo #1549 (mfvescovi) * Missing secret plugin handling #1548 (giox069) * Fixes for rcgit-28 #1547 (antenore) - Activated telepathy plugin - Update to version 1.2.0-rcgit.28 Implemented enhancements: * window has no focus when open ssh sessions #1530 * Enhancement - Variables for pre- and post-commands #1485 * Register and support opening rdp files - Mime improvements #1497 (antenore) * Profile and group name niddles in the pre/post commands #1492 (antenore) * Add xdmcp protocol to Keywords #1491 (mfvescovi) Fixed bugs: * Remmina fails to connect to SSH server without compression since 1.2.0-rcgit-27 (git rcgit-27) #1505 * Pasting something that was copied in another VM that has since been closed causes crash #1484 * SSH password authentication failed Wrong state during pending SSH call #1428 * Fix clipboard cleanup, fixes issue #1484 #1486 (giox069) * telepathy: add dbus-glib-1 to link flags * Minor improvements on secure plugin and SNAP welcome message #1545 * Fixes segmentation fault reported by #1499 #1503 Other improvements: * Redesign - Removed icons where not needed #1535 * Delay and use gtk_window_present_with_time() #1533 * Update French translation #1524 * Fixes for fedora bugs - desktop file and AppStream metadata #1523 * Desktop data fixes #1522 * Updated Hungarian translation #1517 * Removed compression option as not compatible with all SSH servers #1506 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1182=1 Package List: - openSUSE Leap 15.0 (noarch): remmina-lang-1.3.4-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): remmina-1.3.4-lp150.2.3.1 remmina-debuginfo-1.3.4-lp150.2.3.1 remmina-debugsource-1.3.4-lp150.2.3.1 remmina-devel-1.3.4-lp150.2.3.1 remmina-kiosk-1.3.4-lp150.2.3.1 remmina-plugin-exec-1.3.4-lp150.2.3.1 remmina-plugin-exec-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-rdp-1.3.4-lp150.2.3.1 remmina-plugin-rdp-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-secret-1.3.4-lp150.2.3.1 remmina-plugin-secret-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-spice-1.3.4-lp150.2.3.1 remmina-plugin-spice-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-st-1.3.4-lp150.2.3.1 remmina-plugin-st-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-telepathy-1.3.4-lp150.2.3.1 remmina-plugin-telepathy-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-vnc-1.3.4-lp150.2.3.1 remmina-plugin-vnc-debuginfo-1.3.4-lp150.2.3.1 remmina-plugin-xdmcp-1.3.4-lp150.2.3.1 remmina-plugin-xdmcp-debuginfo-1.3.4-lp150.2.3.1 References: https://bugzilla.suse.com/1103557 https://bugzilla.suse.com/1117402 https://bugzilla.suse.com/1123452 https://bugzilla.suse.com/1125549 https://bugzilla.suse.com/1129319

1 0

openSUSE-SU-2019:1180-1: important: Security update for samba
by opensuse-security＠opensuse.org 10 Apr '19

10 Apr '19

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1180-1 Rating: important References: #1114407 #1124223 #1125410 #1126377 #1131060 #1131686 Cross-References: CVE-2019-3880 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for samba fixes the following issues: Security issue fixed: - CVE-2019-3880: Fixed a path/symlink traversal vulnerability, which allowed an unprivileged user to save registry files outside a share (bsc#1131060). ldb was updated to version 1.2.4 (bsc#1125410 bsc#1131686): - Out of bound read in ldb_wildcard_compare - Hold at most 10 outstanding paged result cookies - Put "results_store" into a doubly linked list - Refuse to build Samba against a newer minor version of ldb Non-security issues fixed: - Fixed update-apparmor-samba-profile script after apparmor switched to using named profiles (bsc#1126377). - Abide to the load_printers parameter in smb.conf (bsc#1124223). This update was imported from SUSE:SLE-15:Update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1180=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ctdb-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdb-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdb-pcp-pmda-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdb-pcp-pmda-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdb-tests-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ctdb-tests-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 ldb-debugsource-1.2.4-lp150.10.1 ldb-tools-1.2.4-lp150.10.1 ldb-tools-debuginfo-1.2.4-lp150.10.1 libdcerpc-binding0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-binding0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-samr-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-samr0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-samr0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libldb-devel-1.2.4-lp150.10.1 libldb1-1.2.4-lp150.10.1 libldb1-debuginfo-1.2.4-lp150.10.1 libndr-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-krb5pac-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-krb5pac0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-krb5pac0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-nbt-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-nbt0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-nbt0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-standard-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-standard0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-standard0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libnetapi-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libnetapi0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libnetapi0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-credentials-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-credentials0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-credentials0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-errors-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-errors0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-errors0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-hostconfig-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-hostconfig0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-hostconfig0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-passdb-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-passdb0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-passdb0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-policy-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-policy0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-policy0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-util-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-util0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-util0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamdb-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamdb0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamdb0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbclient-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbclient0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbclient0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbconf-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbconf0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbconf0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbldap-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbldap2-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbldap2-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libtevent-util-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libtevent-util0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libtevent-util0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libwbclient-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libwbclient0-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libwbclient0-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 python-ldb-1.2.4-lp150.10.1 python-ldb-debuginfo-1.2.4-lp150.10.1 python-ldb-devel-1.2.4-lp150.10.1 python3-ldb-1.2.4-lp150.10.1 python3-ldb-debuginfo-1.2.4-lp150.10.1 python3-ldb-devel-1.2.4-lp150.10.1 samba-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-client-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-client-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-core-devel-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-debugsource-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-dsdb-modules-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-dsdb-modules-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-kdc-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-kdc-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-libs-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-libs-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-pidl-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-python-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-python-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-test-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-test-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-winbind-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-winbind-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 - openSUSE Leap 15.0 (noarch): samba-doc-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 - openSUSE Leap 15.0 (x86_64): libdcerpc-binding0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-binding0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-samr0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc-samr0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libdcerpc0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libldb1-32bit-1.2.4-lp150.10.1 libldb1-32bit-debuginfo-1.2.4-lp150.10.1 libndr-krb5pac0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-krb5pac0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-nbt0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-nbt0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-standard0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr-standard0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libndr0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libnetapi0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libnetapi0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-credentials0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-credentials0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-errors0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-errors0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-hostconfig0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-hostconfig0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-passdb0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-passdb0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-policy0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-policy0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-util0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamba-util0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamdb0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsamdb0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbclient0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbclient0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbconf0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbconf0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbldap2-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libsmbldap2-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libtevent-util0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libtevent-util0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libwbclient0-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 libwbclient0-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 python-ldb-32bit-1.2.4-lp150.10.1 python-ldb-32bit-debuginfo-1.2.4-lp150.10.1 python3-ldb-32bit-1.2.4-lp150.10.1 python3-ldb-32bit-debuginfo-1.2.4-lp150.10.1 samba-ceph-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-ceph-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-client-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-client-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-kdc-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-kdc-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-libs-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-libs-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-winbind-32bit-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 samba-winbind-32bit-debuginfo-4.7.11+git.153.b36ceaf2235-lp150.3.14.1 References: https://www.suse.com/security/cve/CVE-2019-3880.html https://bugzilla.suse.com/1114407 https://bugzilla.suse.com/1124223 https://bugzilla.suse.com/1125410 https://bugzilla.suse.com/1126377 https://bugzilla.suse.com/1131060 https://bugzilla.suse.com/1131686

1 0

openSUSE-RU-2019:1179-1: moderate: Recommended update for createrepo_c
by maintenance＠opensuse.org 09 Apr '19

09 Apr '19

openSUSE Recommended Update: Recommended update for createrepo_c ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1179-1 Rating: moderate References: #1125044 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for createrepo_c to version 0.12.1 fixes the following issue: - fix for huge rpm packages (bsc#1125044) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1179=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): createrepo_c-0.12.1-lp150.4.3.1 createrepo_c-debuginfo-0.12.1-lp150.4.3.1 createrepo_c-debugsource-0.12.1-lp150.4.3.1 libcreaterepo_c-devel-0.12.1-lp150.4.3.1 libcreaterepo_c0-0.12.1-lp150.4.3.1 libcreaterepo_c0-debuginfo-0.12.1-lp150.4.3.1 python3-createrepo_c-0.12.1-lp150.4.3.1 python3-createrepo_c-debuginfo-0.12.1-lp150.4.3.1 References: https://bugzilla.suse.com/1125044

1 0

openSUSE-SU-2019:1178-1: important: Security update for bash
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Security update for bash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1178-1 Rating: important References: #1130324 Cross-References: CVE-2019-9924 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bash fixes the following issues: Security issue fixed: - CVE-2019-9924: Fixed a vulnerability in which shell did not prevent user BASH_CMDS allowing the user to execute any command with the permissions of the shell (bsc#1130324). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1178=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): bash-4.3-83.15.1 bash-debuginfo-4.3-83.15.1 bash-debugsource-4.3-83.15.1 bash-devel-4.3-83.15.1 bash-loadables-4.3-83.15.1 bash-loadables-debuginfo-4.3-83.15.1 libreadline6-6.3-83.15.1 libreadline6-debuginfo-6.3-83.15.1 readline-devel-6.3-83.15.1 - openSUSE Leap 42.3 (x86_64): bash-debuginfo-32bit-4.3-83.15.1 libreadline6-32bit-6.3-83.15.1 libreadline6-debuginfo-32bit-6.3-83.15.1 readline-devel-32bit-6.3-83.15.1 - openSUSE Leap 42.3 (noarch): bash-doc-4.3-83.15.1 bash-lang-4.3-83.15.1 readline-doc-6.3-83.15.1 References: https://www.suse.com/security/cve/CVE-2019-9924.html https://bugzilla.suse.com/1130324

1 0

openSUSE-RU-2019:1177-1: Recommended update for openssl
by maintenance＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Recommended Update: Recommended update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1177-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update realigns version requirements for openssl-1_1 across different CPU platforms, especially for PowerPC64. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1177=1 Package List: - openSUSE Leap 15.0 (noarch): libopenssl-devel-1.1.0i-lp150.6.1 openssl-1.1.0i-lp150.6.1 References:

1 0

openSUSE-SU-2019:1172-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1172-1 Rating: moderate References: #1128503 #1130267 Cross-References: CVE-2018-12181 CVE-2019-0160 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for ovmf fixes the following issues: Security issues fixed: - CVE-2019-0160: Fixed multiple buffer overflows in UDF-related codes in MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe (bsc#1130267). - CVE-2018-12181: Fixed a stack buffer overflow in the HII database when a corrupted Bitmap was used (bsc#1128503). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1172=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ovmf-2017+git1510945757.b2662641d5-lp150.4.16.1 ovmf-tools-2017+git1510945757.b2662641d5-lp150.4.16.1 - openSUSE Leap 15.0 (noarch): qemu-ovmf-ia32-2017+git1510945757.b2662641d5-lp150.4.16.1 qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-lp150.4.16.1 - openSUSE Leap 15.0 (x86_64): qemu-ovmf-x86_64-debug-2017+git1510945757.b2662641d5-lp150.4.16.1 References: https://www.suse.com/security/cve/CVE-2018-12181.html https://www.suse.com/security/cve/CVE-2019-0160.html https://bugzilla.suse.com/1128503 https://bugzilla.suse.com/1130267

1 0

openSUSE-SU-2019:1175-1: moderate: Security update for openssl
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Security update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1175-1 Rating: moderate References: #1100078 #1113975 #1117951 #1127080 Cross-References: CVE-2019-1559 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has three fixes is now available. Description: This update for openssl fixes the following issues: Security issues fixed: - The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951) - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080). Other issues addressed: - Fixed IV handling in SHAEXT paths: aes/asm/aesni-sha*-x86_64.pl (bsc#1113975). - Set TLS version to 0 in msg_callback for record messages to avoid confusing applications (bsc#1100078). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1175=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libopenssl-devel-1.0.2j-35.1 libopenssl1_0_0-1.0.2j-35.1 libopenssl1_0_0-debuginfo-1.0.2j-35.1 libopenssl1_0_0-hmac-1.0.2j-35.1 openssl-1.0.2j-35.1 openssl-cavs-1.0.2j-35.1 openssl-cavs-debuginfo-1.0.2j-35.1 openssl-debuginfo-1.0.2j-35.1 openssl-debugsource-1.0.2j-35.1 - openSUSE Leap 42.3 (noarch): openssl-doc-1.0.2j-35.1 - openSUSE Leap 42.3 (x86_64): libopenssl-devel-32bit-1.0.2j-35.1 libopenssl1_0_0-32bit-1.0.2j-35.1 libopenssl1_0_0-debuginfo-32bit-1.0.2j-35.1 libopenssl1_0_0-hmac-32bit-1.0.2j-35.1 References: https://www.suse.com/security/cve/CVE-2019-1559.html https://bugzilla.suse.com/1100078 https://bugzilla.suse.com/1113975 https://bugzilla.suse.com/1117951 https://bugzilla.suse.com/1127080

1 0

openSUSE-SU-2019:1173-1: moderate: Security update for nodejs6
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Security update for nodejs6 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1173-1 Rating: moderate References: #1127080 #1127532 #1127533 Cross-References: CVE-2019-1559 CVE-2019-5737 CVE-2019-5739 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for nodejs6 to version 6.17.0 fixes the following issues: Security issues fixed: - CVE-2019-5739: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127533). - CVE-2019-5737: Fixed a potentially attack vector which could lead to Denial of Service when HTTP connection are kept active (bsc#1127532). - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080). Release Notes: https://nodejs.org/en/blog/release/v6.17.0/ This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1173=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nodejs6-6.17.0-21.1 nodejs6-debuginfo-6.17.0-21.1 nodejs6-debugsource-6.17.0-21.1 nodejs6-devel-6.17.0-21.1 npm6-6.17.0-21.1 - openSUSE Leap 42.3 (noarch): nodejs6-docs-6.17.0-21.1 References: https://www.suse.com/security/cve/CVE-2019-1559.html https://www.suse.com/security/cve/CVE-2019-5737.html https://www.suse.com/security/cve/CVE-2019-5739.html https://bugzilla.suse.com/1127080 https://bugzilla.suse.com/1127532 https://bugzilla.suse.com/1127533

1 0

openSUSE-SU-2019:1174-1: moderate: Recommended update for adcli, sssd
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Recommended update for adcli, sssd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1174-1 Rating: moderate References: #1109849 #1110121 #1121759 #1125617 #1127670 Cross-References: CVE-2019-3811 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for adcli and sssd provides the following improvement: Security vulnerability fixed: - CVE-2019-3811: Fix fallback_homedir returning '/' for empty home directories (bsc#1121759) Other fixes: - Add an option to disable checking for trusted domains in the subdomains provider (bsc#1125617) - Clear pid file in corner cases (bsc#1127670) - Fix child unable to write to log file after SIGHUP (bsc#1127670) - Include adcli in SUSE Linux Enterprise 12 SP3 for sssd-ad. (fate#326619, bsc#1109849) The adcli enables sssd to do password renewal when using Active Directory. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1174=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libipa_hbac-devel-1.13.4-15.1 libipa_hbac0-1.13.4-15.1 libipa_hbac0-debuginfo-1.13.4-15.1 libsss_idmap-devel-1.13.4-15.1 libsss_idmap0-1.13.4-15.1 libsss_idmap0-debuginfo-1.13.4-15.1 libsss_nss_idmap-devel-1.13.4-15.1 libsss_nss_idmap0-1.13.4-15.1 libsss_nss_idmap0-debuginfo-1.13.4-15.1 libsss_sudo-1.13.4-15.1 libsss_sudo-debuginfo-1.13.4-15.1 python-ipa_hbac-1.13.4-15.1 python-ipa_hbac-debuginfo-1.13.4-15.1 python-sss_nss_idmap-1.13.4-15.1 python-sss_nss_idmap-debuginfo-1.13.4-15.1 python-sssd-config-1.13.4-15.1 python-sssd-config-debuginfo-1.13.4-15.1 sssd-1.13.4-15.1 sssd-ad-1.13.4-15.1 sssd-ad-debuginfo-1.13.4-15.1 sssd-debuginfo-1.13.4-15.1 sssd-debugsource-1.13.4-15.1 sssd-ipa-1.13.4-15.1 sssd-ipa-debuginfo-1.13.4-15.1 sssd-krb5-1.13.4-15.1 sssd-krb5-common-1.13.4-15.1 sssd-krb5-common-debuginfo-1.13.4-15.1 sssd-krb5-debuginfo-1.13.4-15.1 sssd-ldap-1.13.4-15.1 sssd-ldap-debuginfo-1.13.4-15.1 sssd-proxy-1.13.4-15.1 sssd-proxy-debuginfo-1.13.4-15.1 sssd-tools-1.13.4-15.1 sssd-tools-debuginfo-1.13.4-15.1 - openSUSE Leap 42.3 (x86_64): sssd-32bit-1.13.4-15.1 sssd-debuginfo-32bit-1.13.4-15.1 References: https://www.suse.com/security/cve/CVE-2019-3811.html https://bugzilla.suse.com/1109849 https://bugzilla.suse.com/1110121 https://bugzilla.suse.com/1121759 https://bugzilla.suse.com/1125617 https://bugzilla.suse.com/1127670

1 0

openSUSE-RU-2019:1171-1: moderate: Recommended update for partclone
by maintenance＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Recommended Update: Recommended update for partclone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1171-1 Rating: moderate References: #1130986 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for partclone fixes the following issues: - Fix a double-free (boo#1130986) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1171=1 Package List: - openSUSE Leap 42.3 (x86_64): partclone-0.3.5a-4.3.1 partclone-debuginfo-0.3.5a-4.3.1 partclone-debugsource-0.3.5a-4.3.1 - openSUSE Leap 42.3 (noarch): partclone-lang-0.3.5a-4.3.1 References: https://bugzilla.suse.com/1130986

1 0

openSUSE-SU-2019:1176-1: Security update for sysstat
by opensuse-security＠opensuse.org 08 Apr '19

08 Apr '19

openSUSE Security Update: Security update for sysstat ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1176-1 Rating: low References: #1117001 #1117260 Cross-References: CVE-2018-19416 CVE-2018-19517 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for sysstat fixes the following issues: Security issues fixed: - CVE-2018-19416: Fixed out-of-bounds read during a memmove call inside the remap_struct function (bsc#1117001). - CVE-2018-19517: Fixed out-of-bounds read during a memset call inside the remap_struct function (bsc#1117260). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1176=1 Package List: - openSUSE Leap 15.0 (x86_64): sysstat-12.0.2-lp150.7.1 sysstat-debuginfo-12.0.2-lp150.7.1 sysstat-debugsource-12.0.2-lp150.7.1 sysstat-isag-12.0.2-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2018-19416.html https://www.suse.com/security/cve/CVE-2018-19517.html https://bugzilla.suse.com/1117001 https://bugzilla.suse.com/1117260

1 0

openSUSE-RU-2019:1169-1: moderate: Recommended update for openssh
by maintenance＠opensuse.org 06 Apr '19

06 Apr '19

openSUSE Recommended Update: Recommended update for openssh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1169-1 Rating: moderate References: #1119183 #1127180 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for openssh fixes the following issues: Issues addressed: - Removed the "KexDHMin" config keyword (bsc#1127180) It used to allow lowering of the minimal allowed DH group size, which was increased to 2048 by upstream in the light of the Logjam attack. However, the code was broken since the upgrade to 7.6p1. It's still possible to use the fixed 1024-bit diffie-hellman-group1-sha1 key exchange method when working with legacy systems. - Fixed two race conditions in sshd relating to SIGHUP (bsc#1119183) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1169=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): openssh-7.6p1-lp150.8.19.1 openssh-cavs-7.6p1-lp150.8.19.1 openssh-cavs-debuginfo-7.6p1-lp150.8.19.1 openssh-debuginfo-7.6p1-lp150.8.19.1 openssh-debugsource-7.6p1-lp150.8.19.1 openssh-fips-7.6p1-lp150.8.19.1 openssh-helpers-7.6p1-lp150.8.19.1 openssh-helpers-debuginfo-7.6p1-lp150.8.19.1 References: https://bugzilla.suse.com/1119183 https://bugzilla.suse.com/1127180

1 0

openSUSE-RU-2019:1170-1: moderate: Recommended update for tomcat
by maintenance＠opensuse.org 06 Apr '19

06 Apr '19

openSUSE Recommended Update: Recommended update for tomcat ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1170-1 Rating: moderate References: #1115951 #1123407 #1126202 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for tomcat fixes the following issues: - Page of SUSE Manager broken (bsc#1126202,bsc#1115951). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1170=1 Package List: - openSUSE Leap 15.0 (noarch): tomcat-9.0.12-lp150.2.16.1 tomcat-admin-webapps-9.0.12-lp150.2.16.1 tomcat-docs-webapp-9.0.12-lp150.2.16.1 tomcat-el-3_0-api-9.0.12-lp150.2.16.1 tomcat-embed-9.0.12-lp150.2.16.1 tomcat-javadoc-9.0.12-lp150.2.16.1 tomcat-jsp-2_3-api-9.0.12-lp150.2.16.1 tomcat-jsvc-9.0.12-lp150.2.16.1 tomcat-lib-9.0.12-lp150.2.16.1 tomcat-servlet-4_0-api-9.0.12-lp150.2.16.1 tomcat-webapps-9.0.12-lp150.2.16.1 References: https://bugzilla.suse.com/1115951 https://bugzilla.suse.com/1123407 https://bugzilla.suse.com/1126202

1 0

openSUSE-SU-2019:1162-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1162-1 Rating: important References: #1125330 #1129821 #1130262 Cross-References: CVE-2018-18335 CVE-2018-18356 CVE-2018-18506 CVE-2018-18509 CVE-2019-5785 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795 CVE-2019-9796 CVE-2019-9801 CVE-2019-9810 CVE-2019-9813 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This update for MozillaThunderbird to version 60.5.1 fixes the following issues: Security issues fixed: - Update to MozillaThunderbird 60.6.1 (bsc#1130262): - CVE-2019-9813: Fixed Ionmonkey type confusion with __proto__ mutations - CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information - Update to MozillaThunderbird 60.6 (bsc#1129821): - CVE-2018-18506: Fixed an issue with Proxy Auto-Configuration file - CVE-2019-9801: Fixed an issue which could allow Windows programs to be exposed to web content - CVE-2019-9788: Fixed multiple memory safety bugs - CVE-2019-9790: Fixed a Use-after-free vulnerability when removing in-use DOM elements - CVE-2019-9791: Fixed an incorrect Type inference for constructors entered through on-stack replacement with IonMonkey - CVE-2019-9792: Fixed an issue where IonMonkey leaks JS_OPTIMIZED_OUT magic value to script - CVE-2019-9793: Fixed multiple improper bounds checks when Spectre mitigations are disabled - CVE-2019-9794: Fixed an issue where command line arguments not discarded during execution - CVE-2019-9795: Fixed a Type-confusion vulnerability in IonMonkey JIT compiler - CVE-2019-9796: Fixed a Use-after-free vulnerability in SMIL animation controller - Update to MozillaThunderbird 60.5.1 (bsc#1125330): - CVE-2018-18356: Fixed a use-after-free vulnerability in the Skia library which can occur when creating a path, leading to a potentially exploitable crash. - CVE-2019-5785: Fixed an integer overflow vulnerability in the Skia library which can occur after specific transform operations, leading to a potentially exploitable crash. - CVE-2018-18335: Fixed a buffer overflow vulnerability in the Skia library which can occur with Canvas 2D acceleration on macOS. This issue was addressed by disabling Canvas 2D acceleration in Firefox ESR. Note: this does not affect other versions and platforms where Canvas 2D acceleration is already disabled by default. - CVE-2018-18509: Fixed a flaw which during verification of certain S/MIME signatures showing mistakenly that emails bring a valid sugnature. Release notes: https://www.mozilla.org/en-US/security/advisories/mfsa2019-12/ https://www.mozilla.org/en-US/security/advisories/mfsa2019-11/ https://www.mozilla.org/en-US/security/advisories/mfsa2019-06/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1162=1 Package List: - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-60.6.1-lp150.3.37.1 MozillaThunderbird-buildsymbols-60.6.1-lp150.3.37.1 MozillaThunderbird-debuginfo-60.6.1-lp150.3.37.1 MozillaThunderbird-debugsource-60.6.1-lp150.3.37.1 MozillaThunderbird-translations-common-60.6.1-lp150.3.37.1 MozillaThunderbird-translations-other-60.6.1-lp150.3.37.1 References: https://www.suse.com/security/cve/CVE-2018-18335.html https://www.suse.com/security/cve/CVE-2018-18356.html https://www.suse.com/security/cve/CVE-2018-18506.html https://www.suse.com/security/cve/CVE-2018-18509.html https://www.suse.com/security/cve/CVE-2019-5785.html https://www.suse.com/security/cve/CVE-2019-9788.html https://www.suse.com/security/cve/CVE-2019-9790.html https://www.suse.com/security/cve/CVE-2019-9791.html https://www.suse.com/security/cve/CVE-2019-9792.html https://www.suse.com/security/cve/CVE-2019-9793.html https://www.suse.com/security/cve/CVE-2019-9794.html https://www.suse.com/security/cve/CVE-2019-9795.html https://www.suse.com/security/cve/CVE-2019-9796.html https://www.suse.com/security/cve/CVE-2019-9801.html https://www.suse.com/security/cve/CVE-2019-9810.html https://www.suse.com/security/cve/CVE-2019-9813.html https://bugzilla.suse.com/1125330 https://bugzilla.suse.com/1129821 https://bugzilla.suse.com/1130262

1 0

openSUSE-SU-2019:1164-1: moderate: Security update for go1.11
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for go1.11 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1164-1 Rating: moderate References: #1123013 Cross-References: CVE-2019-6486 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for go1.11 to version 1.11.5 fixes the following issues: Security issue fixed: - CVE-2019-6486: Fixed a CPU Denial-of-Service vulnerability affecting crypto/ellpitic related to P-521 and P-384 (bsc#1123013 go#29903). Other bug fixes and changes made: - Fix erroneous trailing backslash in %post script. - Use better forms of -exec \; in some places. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1164=1 Package List: - openSUSE Leap 15.0 (x86_64): go1.11-1.11.5-lp150.6.4 go1.11-doc-1.11.5-lp150.6.4 go1.11-race-1.11.5-lp150.6.4 References: https://www.suse.com/security/cve/CVE-2019-6486.html https://bugzilla.suse.com/1123013

1 0

openSUSE-RU-2019:1168-1: moderate: Recommended update for xmonad
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for xmonad ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1168-1 Rating: moderate References: #1128329 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xmonad fixes the following issues: - Fix focus when pointer entering empty workspace. - Fix issues where xmonad would not start because an incorrect serialized state file was still lying around in the user's home. The patch comes from https://github.com/xmonad/xmonad/pull/91 (boo#1128329). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1168=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le x86_64): ghc-xmonad-0.13-bp150.3.3.1 ghc-xmonad-devel-0.13-bp150.3.3.1 xmonad-0.13-bp150.3.3.1 References: https://bugzilla.suse.com/1128329

1 0

openSUSE-RU-2019:1165-1: moderate: Recommended update for libtirpc
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for libtirpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1165-1 Rating: moderate References: #1126096 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtirpc fixes the following issues: - Fixed yp_bind_client_create_v3: RPC: Unknown host error (bsc#1126096). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1165=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libtirpc-debugsource-1.0.1-5.9.1 libtirpc-devel-1.0.1-5.9.1 libtirpc-netconfig-1.0.1-5.9.1 libtirpc3-1.0.1-5.9.1 libtirpc3-debuginfo-1.0.1-5.9.1 - openSUSE Leap 42.3 (x86_64): libtirpc3-32bit-1.0.1-5.9.1 libtirpc3-debuginfo-32bit-1.0.1-5.9.1 References: https://bugzilla.suse.com/1126096

1 0

openSUSE-SU-2019:1161-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1161-1 Rating: moderate References: #1108606 #1115717 #1121626 #1125113 Cross-References: CVE-2018-17000 CVE-2018-19210 CVE-2019-6128 CVE-2019-7663 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed a NULL pointer dereference in TIFFWriteDirectorySec function (bsc#1115717). - CVE-2018-17000: Fixed a NULL pointer dereference in the _TIFFmemcmp function (bsc#1108606). - CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tif_unix.c (bsc#1121626). - CVE-2019-7663: Fixed an invalid address dereference in the TIFFWriteDirectoryTagTransfer function in libtiff/tif_dirwrite.c (bsc#1125113) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1161=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libtiff-devel-4.0.9-lp150.4.16.1 libtiff5-4.0.9-lp150.4.16.1 libtiff5-debuginfo-4.0.9-lp150.4.16.1 tiff-4.0.9-lp150.4.16.1 tiff-debuginfo-4.0.9-lp150.4.16.1 tiff-debugsource-4.0.9-lp150.4.16.1 - openSUSE Leap 15.0 (x86_64): libtiff-devel-32bit-4.0.9-lp150.4.16.1 libtiff5-32bit-4.0.9-lp150.4.16.1 libtiff5-32bit-debuginfo-4.0.9-lp150.4.16.1 References: https://www.suse.com/security/cve/CVE-2018-17000.html https://www.suse.com/security/cve/CVE-2018-19210.html https://www.suse.com/security/cve/CVE-2019-6128.html https://www.suse.com/security/cve/CVE-2019-7663.html https://bugzilla.suse.com/1108606 https://bugzilla.suse.com/1115717 https://bugzilla.suse.com/1121626 https://bugzilla.suse.com/1125113

1 0

openSUSE-SU-2019:1159-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1159-1 Rating: moderate References: #1119687 Cross-References: CVE-2018-20346 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 to version 3.27.2 fixes the following issue: Security issue fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687). Release notes: https://www.sqlite.org/releaselog/3_27_2.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1159=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsqlite3-0-3.27.2-lp150.2.3.1 libsqlite3-0-debuginfo-3.27.2-lp150.2.3.1 sqlite3-3.27.2-lp150.2.3.1 sqlite3-debuginfo-3.27.2-lp150.2.3.1 sqlite3-debugsource-3.27.2-lp150.2.3.1 sqlite3-devel-3.27.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libsqlite3-0-32bit-3.27.2-lp150.2.3.1 libsqlite3-0-32bit-debuginfo-3.27.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): sqlite3-doc-3.27.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20346.html https://bugzilla.suse.com/1119687

1 0

openSUSE-SU-2019:1166-1: Security update for znc
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1166-1 Rating: low References: #1130360 Cross-References: CVE-2019-9917 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for znc to version 1.7.2 fixes the following issue: Security issue fixed: - CVE-2019-9917: Fixed an issue where due to invalid encoding znc was crashing (bsc#1130360). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1166=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1166=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): znc-1.7.2-25.1 znc-debuginfo-1.7.2-25.1 znc-debugsource-1.7.2-25.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-25.1 znc-perl-debuginfo-1.7.2-25.1 znc-python3-1.7.2-25.1 znc-python3-debuginfo-1.7.2-25.1 znc-tcl-1.7.2-25.1 znc-tcl-debuginfo-1.7.2-25.1 - openSUSE Leap 42.3 (noarch): znc-lang-1.7.2-25.1 - openSUSE Leap 15.0 (x86_64): znc-1.7.2-lp150.25.1 znc-debuginfo-1.7.2-lp150.25.1 znc-debugsource-1.7.2-lp150.25.1 znc-devel-1.7.2-lp150.25.1 znc-perl-1.7.2-lp150.25.1 znc-perl-debuginfo-1.7.2-lp150.25.1 znc-python3-1.7.2-lp150.25.1 znc-python3-debuginfo-1.7.2-lp150.25.1 znc-tcl-1.7.2-lp150.25.1 znc-tcl-debuginfo-1.7.2-lp150.25.1 - openSUSE Leap 15.0 (noarch): znc-lang-1.7.2-lp150.25.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): znc-1.7.2-bp150.2.3.1 znc-debuginfo-1.7.2-bp150.2.3.1 znc-debugsource-1.7.2-bp150.2.3.1 znc-devel-1.7.2-bp150.2.3.1 znc-perl-1.7.2-bp150.2.3.1 znc-perl-debuginfo-1.7.2-bp150.2.3.1 znc-python3-1.7.2-bp150.2.3.1 znc-python3-debuginfo-1.7.2-bp150.2.3.1 znc-tcl-1.7.2-bp150.2.3.1 znc-tcl-debuginfo-1.7.2-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): znc-lang-1.7.2-bp150.2.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): znc-1.7.2-23.1 znc-1.7.2-25.1 znc-devel-1.7.2-23.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-23.1 znc-perl-1.7.2-25.1 znc-python3-1.7.2-23.1 znc-python3-1.7.2-25.1 znc-tcl-1.7.2-23.1 znc-tcl-1.7.2-25.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): znc-lang-1.7.2-23.1 znc-lang-1.7.2-25.1 References: https://www.suse.com/security/cve/CVE-2019-9917.html https://bugzilla.suse.com/1130360

1 0

openSUSE-SU-2019:1160-1: moderate: Security update for liblouis
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for liblouis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1160-1 Rating: moderate References: #1094685 #1095189 #1095825 #1095826 #1095827 #1095945 #1097103 #1109319 Cross-References: CVE-2018-11410 CVE-2018-11440 CVE-2018-11577 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-12085 CVE-2018-17294 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for liblouis fixes the following issues: Security issues fixed: - CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function which could allow a remote attacker to cause Denail of Service (bsc#1109319). - CVE-2018-11410: Fixed an invalid free in the compileRule function in compileTranslationTable.c (bsc#1094685) - CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095189) - CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c (bsc#1095945) - CVE-2018-11683: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1095827) - CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826) - CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825) - CVE-2018-12085: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1097103) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1160=1 Package List: - openSUSE Leap 15.0 (x86_64): liblouis-data-3.3.0-lp150.3.3.1 liblouis-debuginfo-3.3.0-lp150.3.3.1 liblouis-debugsource-3.3.0-lp150.3.3.1 liblouis-devel-3.3.0-lp150.3.3.1 liblouis-doc-3.3.0-lp150.3.3.1 liblouis-tools-3.3.0-lp150.3.3.1 liblouis-tools-debuginfo-3.3.0-lp150.3.3.1 liblouis14-3.3.0-lp150.3.3.1 liblouis14-debuginfo-3.3.0-lp150.3.3.1 python3-louis-3.3.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11410.html https://www.suse.com/security/cve/CVE-2018-11440.html https://www.suse.com/security/cve/CVE-2018-11577.html https://www.suse.com/security/cve/CVE-2018-11683.html https://www.suse.com/security/cve/CVE-2018-11684.html https://www.suse.com/security/cve/CVE-2018-11685.html https://www.suse.com/security/cve/CVE-2018-12085.html https://www.suse.com/security/cve/CVE-2018-17294.html https://bugzilla.suse.com/1094685 https://bugzilla.suse.com/1095189 https://bugzilla.suse.com/1095825 https://bugzilla.suse.com/1095826 https://bugzilla.suse.com/1095827 https://bugzilla.suse.com/1095945 https://bugzilla.suse.com/1097103 https://bugzilla.suse.com/1109319

1 0

openSUSE-RU-2019:1156-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1156-1 Rating: moderate References: #1095141 #1100864 #1112272 #1116337 #1123814 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Fixes a typo in new udev rule (bsc#1116337) - Device names were truncated when calling 'mdadm --detail --export' (bsc#1123814) - Fixes an issue when assemble an md array with huge numbers of DASD devices (bsc#1100864, bsc#1095141) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1156=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mdadm-4.0-5.12.1 mdadm-debuginfo-4.0-5.12.1 mdadm-debugsource-4.0-5.12.1 References: https://bugzilla.suse.com/1095141 https://bugzilla.suse.com/1100864 https://bugzilla.suse.com/1112272 https://bugzilla.suse.com/1116337 https://bugzilla.suse.com/1123814

1 0

openSUSE-SU-2019:1166-1: Security update for znc
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1166-1 Rating: low References: #1130360 Cross-References: CVE-2019-9917 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for znc to version 1.7.2 fixes the following issue: Security issue fixed: - CVE-2019-9917: Fixed an issue where due to invalid encoding znc was crashing (bsc#1130360). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1166=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): znc-1.7.2-25.1 znc-debuginfo-1.7.2-25.1 znc-debugsource-1.7.2-25.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-25.1 znc-perl-debuginfo-1.7.2-25.1 znc-python3-1.7.2-25.1 znc-python3-debuginfo-1.7.2-25.1 znc-tcl-1.7.2-25.1 znc-tcl-debuginfo-1.7.2-25.1 - openSUSE Leap 42.3 (noarch): znc-lang-1.7.2-25.1 - openSUSE Leap 15.0 (x86_64): znc-1.7.2-lp150.25.1 znc-debuginfo-1.7.2-lp150.25.1 znc-debugsource-1.7.2-lp150.25.1 znc-devel-1.7.2-lp150.25.1 znc-perl-1.7.2-lp150.25.1 znc-perl-debuginfo-1.7.2-lp150.25.1 znc-python3-1.7.2-lp150.25.1 znc-python3-debuginfo-1.7.2-lp150.25.1 znc-tcl-1.7.2-lp150.25.1 znc-tcl-debuginfo-1.7.2-lp150.25.1 - openSUSE Leap 15.0 (noarch): znc-lang-1.7.2-lp150.25.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): znc-1.7.2-bp150.2.3.1 znc-debuginfo-1.7.2-bp150.2.3.1 znc-debugsource-1.7.2-bp150.2.3.1 znc-devel-1.7.2-bp150.2.3.1 znc-perl-1.7.2-bp150.2.3.1 znc-perl-debuginfo-1.7.2-bp150.2.3.1 znc-python3-1.7.2-bp150.2.3.1 znc-python3-debuginfo-1.7.2-bp150.2.3.1 znc-tcl-1.7.2-bp150.2.3.1 znc-tcl-debuginfo-1.7.2-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): znc-lang-1.7.2-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9917.html https://bugzilla.suse.com/1130360

1 0

openSUSE-RU-2019:1155-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1155-1 Rating: moderate References: #1125965 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - mod_httpd2 HTTP/2 stream 1 was not closed cleanly: PROTOCOL_ERROR (bsc#1125965) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1155=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-40.1 apache2-debuginfo-2.4.23-40.1 apache2-debugsource-2.4.23-40.1 apache2-devel-2.4.23-40.1 apache2-event-2.4.23-40.1 apache2-event-debuginfo-2.4.23-40.1 apache2-example-pages-2.4.23-40.1 apache2-prefork-2.4.23-40.1 apache2-prefork-debuginfo-2.4.23-40.1 apache2-utils-2.4.23-40.1 apache2-utils-debuginfo-2.4.23-40.1 apache2-worker-2.4.23-40.1 apache2-worker-debuginfo-2.4.23-40.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-40.1 References: https://bugzilla.suse.com/1125965

1 0

openSUSE-SU-2019:1158-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1158-1 Rating: moderate References: #1125401 #1128525 Cross-References: CVE-2019-8936 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd (bsc#1128525). Other isses addressed: - Fixed an issue which caused openSSL mismatch (bsc#1125401) - Fixed several bugs in the BANCOMM reclock driver. - Fixed ntp_loopfilter.c snprintf compilation warnings. - Fixed spurious initgroups() error message. - Fixed STA_NANO struct timex units. - Fixed GPS week rollover in libparse. - Fixed incorrect poll interval in packet. - Added a missing check for ENABLE_CMAC. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1158=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ntp-4.2.8p13-31.9.1 ntp-debuginfo-4.2.8p13-31.9.1 ntp-debugsource-4.2.8p13-31.9.1 ntp-doc-4.2.8p13-31.9.1 References: https://www.suse.com/security/cve/CVE-2019-8936.html https://bugzilla.suse.com/1125401 https://bugzilla.suse.com/1128525

1 0

openSUSE-SU-2019:1163-1: moderate: Security update for ldb
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for ldb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1163-1 Rating: moderate References: #1125410 Cross-References: CVE-2019-3824 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ldb fixes the following issue: Security issue fixed: - CVE-2019-3824: Fixed an out-of-bound read vulnerability in ldb_wildcard_compare (bsc#1125410). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1163=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ldb-debugsource-1.2.3-lp150.7.2 ldb-tools-1.2.3-lp150.7.2 ldb-tools-debuginfo-1.2.3-lp150.7.2 libldb-devel-1.2.3-lp150.7.2 libldb1-1.2.3-lp150.7.2 libldb1-debuginfo-1.2.3-lp150.7.2 python-ldb-1.2.3-lp150.7.2 python-ldb-debuginfo-1.2.3-lp150.7.2 python-ldb-devel-1.2.3-lp150.7.2 python3-ldb-1.2.3-lp150.7.2 python3-ldb-debuginfo-1.2.3-lp150.7.2 python3-ldb-devel-1.2.3-lp150.7.2 - openSUSE Leap 15.0 (x86_64): libldb1-32bit-1.2.3-lp150.7.2 libldb1-32bit-debuginfo-1.2.3-lp150.7.2 python-ldb-32bit-1.2.3-lp150.7.2 python-ldb-32bit-debuginfo-1.2.3-lp150.7.2 python3-ldb-32bit-1.2.3-lp150.7.2 python3-ldb-32bit-debuginfo-1.2.3-lp150.7.2 References: https://www.suse.com/security/cve/CVE-2019-3824.html https://bugzilla.suse.com/1125410

1 0

openSUSE-RU-2019:1157-1: moderate: Recommended update for python-certbot
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for python-certbot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1157-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-certbot fixes the following issues: - Provide certbot namespace on py2 too to avoid migration conflict Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1157=1 Package List: - openSUSE Leap 15.0 (noarch): python2-certbot-0.30.2-lp150.6.1 python3-certbot-0.30.2-lp150.6.1 References:

1 0

openSUSE-RU-2019:1153-1: moderate: Recommended update for PackageKit-Qt
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for PackageKit-Qt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1153-1 Rating: moderate References: #1103678 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for PackageKit-Qt fixes the following issues: - Uses now the NetworkManager's dbus signal when PackageKit is not running and thus, can't emit a propertiesUpdated signal when the network changes its state. (boo#1103678) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1153=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): PackageKit-Qt-devel-0.9.6-bp150.3.3.1 libpackagekitqt5-0-0.9.6-bp150.3.3.1 References: https://bugzilla.suse.com/1103678

1 0

openSUSE-RU-2019:1150-1: moderate: Recommended update for xmonad
by maintenance＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Recommended Update: Recommended update for xmonad ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1150-1 Rating: moderate References: #1128329 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xmonad fixes the following issues: - Fix focus when pointer entering empty workspace. - Fix issues where xmonad would not start because an incorrect serialized state file was still lying around in the user's home. The patch comes from https://github.com/xmonad/xmonad/pull/91 (boo#1128329). Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1150=1 Package List: - openSUSE Leap 15.0 (x86_64): ghc-xmonad-0.13-lp150.2.3.1 ghc-xmonad-devel-0.13-lp150.2.3.1 xmonad-0.13-lp150.2.3.1 References: https://bugzilla.suse.com/1128329

1 0

openSUSE-SU-2019:1141-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1141-1 Rating: moderate References: #1106415 #1106996 #1113064 #1120381 #1124365 #1124366 #1124367 #1124368 #1128649 Cross-References: CVE-2018-16412 CVE-2018-18544 CVE-2018-20467 CVE-2019-7175 CVE-2019-7395 CVE-2019-7396 CVE-2019-7397 CVE-2019-7398 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves 8 vulnerabilities and has one errata is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649). - CVE-2018-18544: Fixed a memory leak in the function WriteMSLImage (bsc#1113064). - CVE-2018-20467: Fixed an infinite loop in coders/bmp.c (bsc#1120381). - CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365). - CVE-2019-7396: Fixed a memory leak in the function ReadSIXELImage (bsc#1124367). - CVE-2019-7395: Fixed a memory leak in the function WritePSDChannel (bsc#1124368). - CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366). - CVE-2018-16412: Prevent heap-based buffer over-read in the ParseImageResourceBlocks function leading to DOS (bsc#1106996). Non-security issue fixed: - Fixed a regression in regards to the 'edge' comand line flag (bsc#1106415) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1141=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.26.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.26.1 ImageMagick-debugsource-7.0.7.34-lp150.2.26.1 ImageMagick-devel-7.0.7.34-lp150.2.26.1 ImageMagick-extra-7.0.7.34-lp150.2.26.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.26.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.26.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.26.1 libMagick++-devel-7.0.7.34-lp150.2.26.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.26.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.26.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.26.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.26.1 perl-PerlMagick-7.0.7.34-lp150.2.26.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.26.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.26.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.26.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.26.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.26.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.26.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.26.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.26.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.26.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.26.1 References: https://www.suse.com/security/cve/CVE-2018-16412.html https://www.suse.com/security/cve/CVE-2018-18544.html https://www.suse.com/security/cve/CVE-2018-20467.html https://www.suse.com/security/cve/CVE-2019-7175.html https://www.suse.com/security/cve/CVE-2019-7395.html https://www.suse.com/security/cve/CVE-2019-7396.html https://www.suse.com/security/cve/CVE-2019-7397.html https://www.suse.com/security/cve/CVE-2019-7398.html https://bugzilla.suse.com/1106415 https://bugzilla.suse.com/1106996 https://bugzilla.suse.com/1113064 https://bugzilla.suse.com/1120381 https://bugzilla.suse.com/1124365 https://bugzilla.suse.com/1124366 https://bugzilla.suse.com/1124367 https://bugzilla.suse.com/1124368 https://bugzilla.suse.com/1128649

1 0

openSUSE-SU-2019:1144-1: moderate: Security update for libcaca
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for libcaca ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1144-1 Rating: moderate References: #1120470 #1120502 #1120503 #1120504 #1120584 #1120589 Cross-References: CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for libcaca fixes the following issues: Security issues fixed: - CVE-2018-20544: Fixed a floating point exception at caca/dither.c (bsc#1120502) - CVE-2018-20545: Fixed a WRITE memory access in the load_image function at common-image.c for 4bpp (bsc#1120584) - CVE-2018-20546: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for bpp (bsc#1120503) - CVE-2018-20547: Fixed a READ memory access in the get_rgba_default function at caca/dither.c for 24bpp (bsc#1120504) - CVE-2018-20548: Fixed a WRITE memory access in the load_image function at common-image.c for 1bpp (bsc#1120589) - CVE-2018-20549: Fixed a WRITE memory access in the caca_file_read function at caca/file.c (bsc#1120470) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1144=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): caca-utils-0.99.beta19.git20171003-lp150.2.3.1 caca-utils-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 libcaca-debugsource-0.99.beta19.git20171003-lp150.2.3.1 libcaca-devel-0.99.beta19.git20171003-lp150.2.3.1 libcaca-ruby-0.99.beta19.git20171003-lp150.2.3.1 libcaca-ruby-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-plugins-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-plugins-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): python3-caca-0.99.beta19.git20171003-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libcaca0-32bit-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-32bit-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-plugins-32bit-0.99.beta19.git20171003-lp150.2.3.1 libcaca0-plugins-32bit-debuginfo-0.99.beta19.git20171003-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20544.html https://www.suse.com/security/cve/CVE-2018-20545.html https://www.suse.com/security/cve/CVE-2018-20546.html https://www.suse.com/security/cve/CVE-2018-20547.html https://www.suse.com/security/cve/CVE-2018-20548.html https://www.suse.com/security/cve/CVE-2018-20549.html https://bugzilla.suse.com/1120470 https://bugzilla.suse.com/1120502 https://bugzilla.suse.com/1120503 https://bugzilla.suse.com/1120504 https://bugzilla.suse.com/1120584 https://bugzilla.suse.com/1120589

1 0

openSUSE-SU-2019:1143-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1143-1 Rating: moderate References: #1128525 Cross-References: CVE-2019-8936 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd (bsc#1128525). Other issues addressed: - Fixed several bugs in the BANCOMM reclock driver. - Fixed ntp_loopfilter.c snprintf compilation warnings. - Fixed spurious initgroups() error message. - Fixed STA_NANO struct timex units. - Fixed GPS week rollover in libparse. - Fixed incorrect poll interval in packet. - Added a missing check for ENABLE_CMAC. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1143=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ntp-4.2.8p13-lp150.8.1 ntp-debuginfo-4.2.8p13-lp150.8.1 ntp-debugsource-4.2.8p13-lp150.8.1 ntp-doc-4.2.8p13-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-8936.html https://bugzilla.suse.com/1128525

1 0

openSUSE-SU-2019:1140-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1140-1 Rating: moderate References: #1123361 #1123522 Cross-References: CVE-2019-6977 CVE-2019-6978 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361). - CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1140=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gd-2.1.0-30.1 gd-debuginfo-2.1.0-30.1 gd-debugsource-2.1.0-30.1 gd-devel-2.1.0-30.1 - openSUSE Leap 42.3 (x86_64): gd-32bit-2.1.0-30.1 gd-debuginfo-32bit-2.1.0-30.1 References: https://www.suse.com/security/cve/CVE-2019-6977.html https://www.suse.com/security/cve/CVE-2019-6978.html https://bugzilla.suse.com/1123361 https://bugzilla.suse.com/1123522

1 0

openSUSE-RU-2019:1151-1: moderate: Recommended update for PackageKit-Qt
by maintenance＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Recommended Update: Recommended update for PackageKit-Qt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1151-1 Rating: moderate References: #1103678 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for PackageKit-Qt fixes the following issues: - Uses now the NetworkManager's dbus signal when PackageKit is not running and thus, can't emit a propertiesUpdated signal when the network changes its state. (boo#1103678) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1151=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): PackageKit-Qt-devel-0.9.6-lp150.3.3.1 libpackagekitqt5-0-0.9.6-lp150.3.3.1 libpackagekitqt5-0-debuginfo-0.9.6-lp150.3.3.1 References: https://bugzilla.suse.com/1103678

1 0

openSUSE-SU-2019:1139-1: moderate: Security update for ovmf
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for ovmf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1139-1 Rating: moderate References: #1128503 Cross-References: CVE-2018-12181 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ovmf fixes the following issue: Security issue fixed: - CVE-2018-12181: Fixed a stack buffer overflow in the HII database when a corrupted Bitmap was used (bsc#1128503). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1139=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ovmf-2017+git1492060560.b6d11d7c46-19.1 ovmf-tools-2017+git1492060560.b6d11d7c46-19.1 - openSUSE Leap 42.3 (noarch): qemu-ovmf-ia32-2017+git1492060560.b6d11d7c46-19.1 qemu-ovmf-x86_64-2017+git1492060560.b6d11d7c46-19.1 - openSUSE Leap 42.3 (x86_64): qemu-ovmf-x86_64-debug-2017+git1492060560.b6d11d7c46-19.1 References: https://www.suse.com/security/cve/CVE-2018-12181.html https://bugzilla.suse.com/1128503

1 0

openSUSE-RU-2019:1146-1: moderate: Security update for libnettle
by maintenance＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Recommended Update: Security update for libnettle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1146-1 Rating: moderate References: #1129598 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libnettle to version 3.4.1 fixes the following issues: Issues addressed and new features: - Updated to 3.4.1 (fate#327114 and bsc#1129598) - Fixed a missing break statements in the parsing of PEM input files in pkcs1-conv. - Fixed a link error on the pss-mgf1-test which was affecting builds without public key support. - All functions using RSA private keys are now side-channel silent. This applies both to the bignum calculations, which now use GMP's mpn_sec_* family of functions, and the processing of PKCS#1 padding needed for RSA decryption. - Changes in behavior: The functions rsa_decrypt and rsa_decrypt_tr may now clobber all of the provided message buffer, independent of the actual message length. They are side-channel silent, in that branches and memory accesses don't depend on the validity or length of the message. Side-channel leakage from the caller's use of length and return value may still provide an oracle useable for a Bleichenbacher-style chosen ciphertext attack. Which is why the new function rsa_sec_decrypt is recommended. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1146=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libhogweed4-3.4.1-lp150.8.1 libhogweed4-debuginfo-3.4.1-lp150.8.1 libnettle-debugsource-3.4.1-lp150.8.1 libnettle-devel-3.4.1-lp150.8.1 libnettle6-3.4.1-lp150.8.1 libnettle6-debuginfo-3.4.1-lp150.8.1 nettle-3.4.1-lp150.8.1 nettle-debuginfo-3.4.1-lp150.8.1 - openSUSE Leap 15.0 (x86_64): libhogweed4-32bit-3.4.1-lp150.8.1 libhogweed4-32bit-debuginfo-3.4.1-lp150.8.1 libnettle-devel-32bit-3.4.1-lp150.8.1 libnettle6-32bit-3.4.1-lp150.8.1 libnettle6-32bit-debuginfo-3.4.1-lp150.8.1 References: https://bugzilla.suse.com/1129598

1 0

openSUSE-SU-2019:1145-1: moderate: Security update for wavpack
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for wavpack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1145-1 Rating: moderate References: #1120929 #1120930 Cross-References: CVE-2018-19840 CVE-2018-19841 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for wavpack fixes the following issues: Security issues fixed: - CVE-2018-19840: Fixed a denial-of-service in the WavpackPackInit function from pack_utils.c (bsc#1120930) - CVE-2018-19841: Fixed a denial-of-service in the WavpackVerifySingleBlock function from open_utils.c (bsc#1120929) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1145=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwavpack1-5.1.0-lp150.3.3.1 libwavpack1-debuginfo-5.1.0-lp150.3.3.1 wavpack-5.1.0-lp150.3.3.1 wavpack-debuginfo-5.1.0-lp150.3.3.1 wavpack-debugsource-5.1.0-lp150.3.3.1 wavpack-devel-5.1.0-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libwavpack1-32bit-5.1.0-lp150.3.3.1 libwavpack1-32bit-debuginfo-5.1.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-19840.html https://www.suse.com/security/cve/CVE-2018-19841.html https://bugzilla.suse.com/1120929 https://bugzilla.suse.com/1120930

1 0

openSUSE-SU-2019:1142-1: moderate: Security update for w3m
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for w3m ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1142-1 Rating: moderate References: #1077559 #1077568 #1077572 Cross-References: CVE-2018-6196 CVE-2018-6197 CVE-2018-6198 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for w3m fixes the following issues: Security issues fixed: - CVE-2018-6196: Prevent infinite recursion in HTMLlineproc0 caused by the feed_table_block_tag function which did not prevent a negative indent value (bsc#1077559) - CVE-2018-6197: Prevent NULL pointer dereference in formUpdateBuffer (bsc#1077568) - CVE-2018-6198: w3m did not properly handle temporary files when the ~/.w3m directory is unwritable, which allowed a local attacker to craft a symlink attack to overwrite arbitrary files (bsc#1077572) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1142=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): w3m-0.5.3.git20161120-164.3.1 w3m-debuginfo-0.5.3.git20161120-164.3.1 w3m-debugsource-0.5.3.git20161120-164.3.1 w3m-inline-image-0.5.3.git20161120-164.3.1 w3m-inline-image-debuginfo-0.5.3.git20161120-164.3.1 References: https://www.suse.com/security/cve/CVE-2018-6196.html https://www.suse.com/security/cve/CVE-2018-6197.html https://www.suse.com/security/cve/CVE-2018-6198.html https://bugzilla.suse.com/1077559 https://bugzilla.suse.com/1077568 https://bugzilla.suse.com/1077572

1 0

openSUSE-SU-2019:1147-1: moderate: Security update for openssl-1_1
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1147-1 Rating: moderate References: #1116833 #1125494 #1128189 Cross-References: CVE-2019-1543 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for openssl-1_1 (OpenSSL Security Advisory [6 March 2019]) fixes the following issues: Security issue fixed: - CVE-2019-1543: Fixed an implementation error in ChaCha20-Poly1305 where it was allowed to set IV with more than 12 bytes (bsc#1128189). Other issues addressed: - Fixed a segfault in openssl speed when an unknown algorithm is passed (bsc#1125494). - Correctly skipped binary curves in openssl speed to avoid spitting errors (bsc#1116833). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1147=1 Package List: - openSUSE Leap 15.0 (noarch): openssl-1_1-doc-1.1.0i-lp150.3.22.3 - openSUSE Leap 15.0 (x86_64): libopenssl-1_1-devel-1.1.0i-lp150.3.22.3 libopenssl1_1-1.1.0i-lp150.3.22.3 libopenssl1_1-debuginfo-1.1.0i-lp150.3.22.3 libopenssl1_1-hmac-1.1.0i-lp150.3.22.3 openssl-1_1-1.1.0i-lp150.3.22.3 openssl-1_1-debuginfo-1.1.0i-lp150.3.22.3 openssl-1_1-debugsource-1.1.0i-lp150.3.22.3 References: https://www.suse.com/security/cve/CVE-2019-1543.html https://bugzilla.suse.com/1116833 https://bugzilla.suse.com/1125494 https://bugzilla.suse.com/1128189

1 0

openSUSE-SU-2019:1152-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1152-1 Rating: important References: #1129821 #1130262 Cross-References: CVE-2019-9810 CVE-2019-9813 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Security issues fixed: - update to Mozilla Thunderbird 60.6.1 (bsc#1130262): - CVE-2019-9813: Fixed Ionmonkey type confusion with __proto__ mutations - CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information Release notes: https://www.mozilla.org/en-US/security/advisories/mfsa2019-12 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1152=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaThunderbird-60.6.1-89.1 MozillaThunderbird-buildsymbols-60.6.1-89.1 MozillaThunderbird-debuginfo-60.6.1-89.1 MozillaThunderbird-debugsource-60.6.1-89.1 MozillaThunderbird-translations-common-60.6.1-89.1 MozillaThunderbird-translations-other-60.6.1-89.1 References: https://www.suse.com/security/cve/CVE-2019-9810.html https://www.suse.com/security/cve/CVE-2019-9813.html https://bugzilla.suse.com/1129821 https://bugzilla.suse.com/1130262

1 0

openSUSE-SU-2019:1148-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1148-1 Rating: moderate References: #1123361 #1123522 Cross-References: CVE-2019-6977 CVE-2019-6978 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for gd fixes the following issues: Security issues fixed: - CVE-2019-6977: Fixed a heap-based buffer overflow the GD Graphics Library used in the imagecolormatch function (bsc#1123361). - CVE-2019-6978: Fixed a double free in the gdImage*Ptr() functions (bsc#1123522). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1148=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gd-2.2.5-lp150.8.1 gd-debuginfo-2.2.5-lp150.8.1 gd-debugsource-2.2.5-lp150.8.1 gd-devel-2.2.5-lp150.8.1 libgd3-2.2.5-lp150.8.1 libgd3-debuginfo-2.2.5-lp150.8.1 - openSUSE Leap 15.0 (x86_64): libgd3-32bit-2.2.5-lp150.8.1 libgd3-32bit-debuginfo-2.2.5-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-6977.html https://www.suse.com/security/cve/CVE-2019-6978.html https://bugzilla.suse.com/1123361 https://bugzilla.suse.com/1123522

1 0

openSUSE-RU-2019:1138-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1138-1 Rating: moderate References: #1040054 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - network: disable the "Apply" button until a change has been made (bsc#1040054). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1138=1 Package List: - openSUSE Leap 15.0 (noarch): gnome-control-center-lang-3.26.2-lp150.5.10.1 - openSUSE Leap 15.0 (x86_64): gnome-control-center-3.26.2-lp150.5.10.1 gnome-control-center-color-3.26.2-lp150.5.10.1 gnome-control-center-debuginfo-3.26.2-lp150.5.10.1 gnome-control-center-debugsource-3.26.2-lp150.5.10.1 gnome-control-center-devel-3.26.2-lp150.5.10.1 gnome-control-center-goa-3.26.2-lp150.5.10.1 gnome-control-center-user-faces-3.26.2-lp150.5.10.1 References: https://bugzilla.suse.com/1040054

1 0

openSUSE-RU-2019:1137-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 04 Apr '19

04 Apr '19

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1137-1 Rating: moderate References: #1122938 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-iscsi fixes the following issues: - Fix output for iscsiadm node/iface with print level P1 set. (bsc#1122938), This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1137=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): iscsiuio-0.7.8.2-64.1 iscsiuio-debuginfo-0.7.8.2-64.1 libopeniscsiusr0_2_0-2.0.876-64.1 libopeniscsiusr0_2_0-debuginfo-2.0.876-64.1 open-iscsi-2.0.876-64.1 open-iscsi-debuginfo-2.0.876-64.1 open-iscsi-debugsource-2.0.876-64.1 open-iscsi-devel-2.0.876-64.1 References: https://bugzilla.suse.com/1122938

1 0

openSUSE-RU-2019:1136-1: moderate: Recommended update for xorgxrdp
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for xorgxrdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1136-1 Rating: moderate References: #1103556 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorgxrdp fixes the following issues: - Failed to load module xorgxrdp (bsc#1103556). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1136=1 Package List: - openSUSE Leap 15.0 (x86_64): xorgxrdp-0.2.6-lp150.2.3.1 xorgxrdp-debuginfo-0.2.6-lp150.2.3.1 xorgxrdp-debugsource-0.2.6-lp150.2.3.1 References: https://bugzilla.suse.com/1103556

1 0

openSUSE-RU-2019:1135-1: moderate: Recommended update for os-prober
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for os-prober ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1135-1 Rating: moderate References: #1026766 #1101942 #1113615 #1118279 #1125729 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for os-prober fixes the following issues: Version bump to 1.76: * Fix check on ID_PART_ENTRY_SCHEME, to look for "dos" instead of "msdos" * Remove code using device mapper * This also removes the dependency on dmsetup - os-prober isn't compatible with transactional update (bsc#1125729) - Don't hard require btrfsprogs by downgrading it to suggests (bsc#1118279) - Fix missing grub-probe command that caused linux-boot-probe to abort prematurely. It is a mistake while rebasing patch to 1.76 (bsc#1113615) - UEFI Grub does not insert Arch Linux entry correctly (bsc#1101942) - Rather than Recommend lvm2 merely Suggest it. (bsc#1026766) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1135=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): os-prober-1.76-lp150.3.3.1 os-prober-debuginfo-1.76-lp150.3.3.1 os-prober-debugsource-1.76-lp150.3.3.1 References: https://bugzilla.suse.com/1026766 https://bugzilla.suse.com/1101942 https://bugzilla.suse.com/1113615 https://bugzilla.suse.com/1118279 https://bugzilla.suse.com/1125729

1 0

openSUSE-RU-2019:1134-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1134-1 Rating: moderate References: #1112833 #1126423 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ceph fixes the following issues: Updated to version 12.2.11-566-g896835fd74: * see https://ceph.com/releases/v12-2-11-luminous-released/ for the full release notes * crushtool: add --reclassify operation to convert legacy crush maps to use device classes (bsc#1112833) * ceph-volume-client: allow setting mode of CephFS volumes (jsc#SCRD-8258) Additional fixes: * rgw_file: only first subuser can be exported to nfs (bsc#1126423) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1134=1 Package List: - openSUSE Leap 42.3 (x86_64): ceph-12.2.11+git.1551961392.896835fd74-24.1 ceph-base-12.2.11+git.1551961392.896835fd74-24.1 ceph-base-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-common-12.2.11+git.1551961392.896835fd74-24.1 ceph-common-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-debugsource-12.2.11+git.1551961392.896835fd74-24.1 ceph-fuse-12.2.11+git.1551961392.896835fd74-24.1 ceph-fuse-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-mds-12.2.11+git.1551961392.896835fd74-24.1 ceph-mds-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-mgr-12.2.11+git.1551961392.896835fd74-24.1 ceph-mgr-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-mon-12.2.11+git.1551961392.896835fd74-24.1 ceph-mon-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-osd-12.2.11+git.1551961392.896835fd74-24.1 ceph-osd-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-radosgw-12.2.11+git.1551961392.896835fd74-24.1 ceph-radosgw-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-resource-agents-12.2.11+git.1551961392.896835fd74-24.1 ceph-test-12.2.11+git.1551961392.896835fd74-24.1 ceph-test-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 ceph-test-debugsource-12.2.11+git.1551961392.896835fd74-24.1 libcephfs-devel-12.2.11+git.1551961392.896835fd74-24.1 libcephfs2-12.2.11+git.1551961392.896835fd74-24.1 libcephfs2-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 librados-devel-12.2.11+git.1551961392.896835fd74-24.1 librados-devel-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 librados2-12.2.11+git.1551961392.896835fd74-24.1 librados2-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 libradosstriper-devel-12.2.11+git.1551961392.896835fd74-24.1 libradosstriper1-12.2.11+git.1551961392.896835fd74-24.1 libradosstriper1-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 librbd-devel-12.2.11+git.1551961392.896835fd74-24.1 librbd1-12.2.11+git.1551961392.896835fd74-24.1 librbd1-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 librgw-devel-12.2.11+git.1551961392.896835fd74-24.1 librgw2-12.2.11+git.1551961392.896835fd74-24.1 librgw2-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python-ceph-compat-12.2.11+git.1551961392.896835fd74-24.1 python-cephfs-12.2.11+git.1551961392.896835fd74-24.1 python-cephfs-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python-rados-12.2.11+git.1551961392.896835fd74-24.1 python-rados-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python-rbd-12.2.11+git.1551961392.896835fd74-24.1 python-rbd-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python-rgw-12.2.11+git.1551961392.896835fd74-24.1 python-rgw-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python3-ceph-argparse-12.2.11+git.1551961392.896835fd74-24.1 python3-cephfs-12.2.11+git.1551961392.896835fd74-24.1 python3-cephfs-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python3-rados-12.2.11+git.1551961392.896835fd74-24.1 python3-rados-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python3-rbd-12.2.11+git.1551961392.896835fd74-24.1 python3-rbd-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 python3-rgw-12.2.11+git.1551961392.896835fd74-24.1 python3-rgw-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 rados-objclass-devel-12.2.11+git.1551961392.896835fd74-24.1 rbd-fuse-12.2.11+git.1551961392.896835fd74-24.1 rbd-fuse-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 rbd-mirror-12.2.11+git.1551961392.896835fd74-24.1 rbd-mirror-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 rbd-nbd-12.2.11+git.1551961392.896835fd74-24.1 rbd-nbd-debuginfo-12.2.11+git.1551961392.896835fd74-24.1 References: https://bugzilla.suse.com/1112833 https://bugzilla.suse.com/1126423

1 0

openSUSE-RU-2019:1133-1: moderate: Recommended update for re2
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for re2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1133-1 Rating: moderate References: Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for re2 fixes the following issues: re2 was updated to 2019-03-01: * developer visible changes, performance tweaks and bug fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1133=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1133=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1133=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1133=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libre2-0-20190301-22.1 libre2-0-debuginfo-20190301-22.1 re2-debugsource-20190301-22.1 re2-devel-20190301-22.1 - openSUSE Leap 42.3 (x86_64): libre2-0-32bit-20190301-22.1 libre2-0-debuginfo-32bit-20190301-22.1 - openSUSE Leap 15.0 (i586 x86_64): libre2-0-20190301-lp150.22.2 libre2-0-debuginfo-20190301-lp150.22.2 re2-debugsource-20190301-lp150.22.2 re2-devel-20190301-lp150.22.2 - openSUSE Leap 15.0 (x86_64): libre2-0-32bit-20190301-lp150.22.2 libre2-0-32bit-debuginfo-20190301-lp150.22.2 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libre2-0-20190301-bp150.22.1 libre2-0-debuginfo-20190301-bp150.22.1 re2-debugsource-20190301-bp150.22.1 re2-devel-20190301-bp150.22.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libre2-0-64bit-20190301-bp150.22.1 libre2-0-64bit-debuginfo-20190301-bp150.22.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libre2-0-20190301-22.1 libre2-0-debuginfo-20190301-22.1 re2-debugsource-20190301-22.1 re2-devel-20190301-22.1 References:

1 0

openSUSE-RU-2019:1130-1: moderate: Recommended update for aaa_base
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1130-1 Rating: moderate References: #1088524 #1118364 #1128246 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for aaa_base fixes the following issues: - Restore old position of ssh/sudo source of profile (bsc#1118364). - Update logic for JRE_HOME env variable (bsc#1128246) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1130=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): aaa_base-84.87+git20180409.04c9dae-lp150.8.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-lp150.8.1 aaa_base-debugsource-84.87+git20180409.04c9dae-lp150.8.1 aaa_base-extras-84.87+git20180409.04c9dae-lp150.8.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-lp150.8.1 aaa_base-wsl-84.87+git20180409.04c9dae-lp150.8.1 References: https://bugzilla.suse.com/1088524 https://bugzilla.suse.com/1118364 https://bugzilla.suse.com/1128246

1 0

openSUSE-RU-2019:1133-1: moderate: Recommended update for re2
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for re2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1133-1 Rating: moderate References: Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for re2 fixes the following issues: re2 was updated to 2019-03-01: * developer visible changes, performance tweaks and bug fixes Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1133=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1133=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1133=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libre2-0-20190301-22.1 libre2-0-debuginfo-20190301-22.1 re2-debugsource-20190301-22.1 re2-devel-20190301-22.1 - openSUSE Leap 42.3 (x86_64): libre2-0-32bit-20190301-22.1 libre2-0-debuginfo-32bit-20190301-22.1 - openSUSE Leap 15.0 (i586 x86_64): libre2-0-20190301-lp150.22.2 libre2-0-debuginfo-20190301-lp150.22.2 re2-debugsource-20190301-lp150.22.2 re2-devel-20190301-lp150.22.2 - openSUSE Leap 15.0 (x86_64): libre2-0-32bit-20190301-lp150.22.2 libre2-0-32bit-debuginfo-20190301-lp150.22.2 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libre2-0-20190301-bp150.22.1 libre2-0-debuginfo-20190301-bp150.22.1 re2-debugsource-20190301-bp150.22.1 re2-devel-20190301-bp150.22.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libre2-0-64bit-20190301-bp150.22.1 libre2-0-64bit-debuginfo-20190301-bp150.22.1 References:

1 0

openSUSE-RU-2019:1131-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1131-1 Rating: moderate References: #1125965 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - mod_httpd2 HTTP/2 stream 1 was not closed cleanly: PROTOCOL_ERROR (bsc#1125965) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1131=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.14.1 apache2-debuginfo-2.4.33-lp150.2.14.1 apache2-debugsource-2.4.33-lp150.2.14.1 apache2-devel-2.4.33-lp150.2.14.1 apache2-event-2.4.33-lp150.2.14.1 apache2-event-debuginfo-2.4.33-lp150.2.14.1 apache2-example-pages-2.4.33-lp150.2.14.1 apache2-prefork-2.4.33-lp150.2.14.1 apache2-prefork-debuginfo-2.4.33-lp150.2.14.1 apache2-utils-2.4.33-lp150.2.14.1 apache2-utils-debuginfo-2.4.33-lp150.2.14.1 apache2-worker-2.4.33-lp150.2.14.1 apache2-worker-debuginfo-2.4.33-lp150.2.14.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.14.1 References: https://bugzilla.suse.com/1125965

1 0

openSUSE-SU-2019:1128-1: important: Security update for pdns
by opensuse-security＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1128-1 Rating: important References: #1129734 Cross-References: CVE-2019-3871 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns fixes the following issue: Security issue fixed: - CVE-2019-3871: Fixed an insufficient validation in the HTTP remote backend which could allow a remote user to cause the HTTP backend to connect to an attacker-specified host instead of the configured one (bsc#1129734). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1128=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1128=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1128=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1128=1 Package List: - openSUSE Leap 42.3 (x86_64): pdns-4.0.3-18.1 pdns-backend-geoip-4.0.3-18.1 pdns-backend-geoip-debuginfo-4.0.3-18.1 pdns-backend-godbc-4.0.3-18.1 pdns-backend-godbc-debuginfo-4.0.3-18.1 pdns-backend-ldap-4.0.3-18.1 pdns-backend-ldap-debuginfo-4.0.3-18.1 pdns-backend-lua-4.0.3-18.1 pdns-backend-lua-debuginfo-4.0.3-18.1 pdns-backend-mydns-4.0.3-18.1 pdns-backend-mydns-debuginfo-4.0.3-18.1 pdns-backend-mysql-4.0.3-18.1 pdns-backend-mysql-debuginfo-4.0.3-18.1 pdns-backend-postgresql-4.0.3-18.1 pdns-backend-postgresql-debuginfo-4.0.3-18.1 pdns-backend-remote-4.0.3-18.1 pdns-backend-remote-debuginfo-4.0.3-18.1 pdns-backend-sqlite3-4.0.3-18.1 pdns-backend-sqlite3-debuginfo-4.0.3-18.1 pdns-debuginfo-4.0.3-18.1 pdns-debugsource-4.0.3-18.1 - openSUSE Leap 15.0 (x86_64): pdns-4.1.2-lp150.3.10.1 pdns-backend-geoip-4.1.2-lp150.3.10.1 pdns-backend-geoip-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-godbc-4.1.2-lp150.3.10.1 pdns-backend-godbc-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-ldap-4.1.2-lp150.3.10.1 pdns-backend-ldap-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-lua-4.1.2-lp150.3.10.1 pdns-backend-lua-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-mydns-4.1.2-lp150.3.10.1 pdns-backend-mydns-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-mysql-4.1.2-lp150.3.10.1 pdns-backend-mysql-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-postgresql-4.1.2-lp150.3.10.1 pdns-backend-postgresql-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-remote-4.1.2-lp150.3.10.1 pdns-backend-remote-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-sqlite3-4.1.2-lp150.3.10.1 pdns-backend-sqlite3-debuginfo-4.1.2-lp150.3.10.1 pdns-debuginfo-4.1.2-lp150.3.10.1 pdns-debugsource-4.1.2-lp150.3.10.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): pdns-4.1.2-bp150.2.6.1 pdns-backend-geoip-4.1.2-bp150.2.6.1 pdns-backend-godbc-4.1.2-bp150.2.6.1 pdns-backend-ldap-4.1.2-bp150.2.6.1 pdns-backend-lua-4.1.2-bp150.2.6.1 pdns-backend-mydns-4.1.2-bp150.2.6.1 pdns-backend-mysql-4.1.2-bp150.2.6.1 pdns-backend-postgresql-4.1.2-bp150.2.6.1 pdns-backend-remote-4.1.2-bp150.2.6.1 pdns-backend-sqlite3-4.1.2-bp150.2.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): pdns-4.1.7-17.1 pdns-backend-godbc-4.1.7-17.1 pdns-backend-ldap-4.1.7-17.1 pdns-backend-lua-4.1.7-17.1 pdns-backend-mydns-4.1.7-17.1 pdns-backend-mysql-4.1.7-17.1 pdns-backend-postgresql-4.1.7-17.1 pdns-backend-remote-4.1.7-17.1 pdns-backend-sqlite3-4.1.7-17.1 References: https://www.suse.com/security/cve/CVE-2019-3871.html https://bugzilla.suse.com/1129734

1 0

openSUSE-RU-2019:1127-1: moderate: Recommended update for kwin5
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for kwin5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1127-1 Rating: moderate References: #1103687 #1123638 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kwin5 fixes the following issues: - Switches now correctly to the previously active virtual desktop on login again - Prevents KWin "disappearing" from the global hotkeys settings if the number of virtual desktops is changed (boo#1103687) - Fixes "Capture the current pop-up only" mode in spectacle (boo#1123638) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1127=1 Package List: - openSUSE Leap 15.0 (noarch): kwin5-lang-5.12.6-lp150.7.1 - openSUSE Leap 15.0 (x86_64): kwin5-5.12.6-lp150.7.1 kwin5-debuginfo-5.12.6-lp150.7.1 kwin5-debugsource-5.12.6-lp150.7.1 kwin5-devel-5.12.6-lp150.7.1 References: https://bugzilla.suse.com/1103687 https://bugzilla.suse.com/1123638

1 0

openSUSE-SU-2019:1126-1: critical: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1126-1 Rating: critical References: #1129821 #1130262 Cross-References: CVE-2018-18506 CVE-2019-5785 CVE-2019-9788 CVE-2019-9790 CVE-2019-9791 CVE-2019-9792 CVE-2019-9793 CVE-2019-9794 CVE-2019-9795 CVE-2019-9796 CVE-2019-9801 CVE-2019-9810 CVE-2019-9813 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Security issues fixed: - Update to MozillaThunderbird 60.6.1 (bsc#1130262): - CVE-2019-9813: Fixed Ionmonkey type confusion with __proto__ mutations - CVE-2019-9810: Fixed IonMonkey MArraySlice incorrect alias information - Update to MozillaThunderbird 60.6 (bsc#1129821): - CVE-2018-18506: Fixed an issue with Proxy Auto-Configuration file - CVE-2019-9801: Fixed an issue which could allow Windows programs to be exposed to web content - CVE-2019-9788: Fixed multiple memory safety bugs - CVE-2019-9790: Fixed a Use-after-free vulnerability when removing in-use DOM elements - CVE-2019-9791: Fixed an incorrect Type inference for constructors entered through on-stack replacement with IonMonkey - CVE-2019-9792: Fixed an issue where IonMonkey leaks JS_OPTIMIZED_OUT magic value to script - CVE-2019-9793: Fixed multiple improper bounds checks when Spectre mitigations are disabled - CVE-2019-9794: Fixed an issue where command line arguments not discarded during execution - CVE-2019-9795: Fixed a Type-confusion vulnerability in IonMonkey JIT compiler - CVE-2019-9796: Fixed a Use-after-free vulnerability in SMIL animation controller Release notes: https://www.mozilla.org/en-US/security/advisories/mfsa2019-12/ https://www.mozilla.org/en-US/security/advisories/mfsa2019-11/ Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1126=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): MozillaThunderbird-60.6.1-82.1 MozillaThunderbird-buildsymbols-60.6.1-82.1 MozillaThunderbird-translations-common-60.6.1-82.1 MozillaThunderbird-translations-other-60.6.1-82.1 References: https://www.suse.com/security/cve/CVE-2018-18506.html https://www.suse.com/security/cve/CVE-2019-5785.html https://www.suse.com/security/cve/CVE-2019-9788.html https://www.suse.com/security/cve/CVE-2019-9790.html https://www.suse.com/security/cve/CVE-2019-9791.html https://www.suse.com/security/cve/CVE-2019-9792.html https://www.suse.com/security/cve/CVE-2019-9793.html https://www.suse.com/security/cve/CVE-2019-9794.html https://www.suse.com/security/cve/CVE-2019-9795.html https://www.suse.com/security/cve/CVE-2019-9796.html https://www.suse.com/security/cve/CVE-2019-9801.html https://www.suse.com/security/cve/CVE-2019-9810.html https://www.suse.com/security/cve/CVE-2019-9813.html https://bugzilla.suse.com/1129821 https://bugzilla.suse.com/1130262

1 0

openSUSE-RU-2019:1132-1: moderate: Recommended update for rasdaemon
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for rasdaemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1132-1 Rating: moderate References: #1128122 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rasdaemon fixes the following issues: - Fix AMD K8 bad buffer access and a fix using correct PCI AER type. (bsc#1128122) - Fix on mce-amd-k8.c to avoid writing at the end of buffer. (bsc#1128122) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1132=1 Package List: - openSUSE Leap 15.0 (x86_64): rasdaemon-0.6.0-lp150.4.3.1 rasdaemon-debuginfo-0.6.0-lp150.4.3.1 rasdaemon-debugsource-0.6.0-lp150.4.3.1 References: https://bugzilla.suse.com/1128122

1 0

openSUSE-RU-2019:1129-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1129-1 Rating: moderate References: #1117355 Affected Products: openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for keepassxc fixes the following issues: - update to 2.4.0 - New Database Wizard [#1952] - Advanced Search [#1797] - Automatic update checker [#2648] - KeeShare database synchronization [#2109, #1992, #2738, #2742, #2746, #2739] - Improve favicon fetching; transition to Duck-Duck-Go [#2795, #2011, #2439] - Remove KeePassHttp support [#1752] - CLI: output info to stderr for easier scripting [#2558] - CLI: Add --quiet option [#2507] - CLI: Add create command [#2540] - CLI: Add recursive listing of entries [#2345] - CLI: Fix stdin/stdout encoding on Windows [#2425] - SSH Agent: Support OpenSSH for Windows [#1994] - macOS: TouchID Quick Unlock [#1851] - macOS: Multiple improvements; include CLI in DMG [#2165, #2331, #2583] - Linux: Prevent Klipper from storing secrets in clipboard [#1969] - Linux: Use polling based file watching for NFS [#2171] - Linux: Enable use of browser plugin in Snap build [#2802] - TOTP QR Code Generator [#1167] - High-DPI Scaling for 4k screens [#2404] - Make keyboard shortcuts more consistent [#2431] - Warn user if deleting referenced entries [#1744] - Allow toolbar to be hidden and repositioned [#1819, #2357] - Increase max allowed database timeout to 12 hours [#2173] - Password generator uses existing password length by default [#2318] - Improve alert message box button labels [#2376] - Show message when a database merge makes no changes [#2551] - Browser Integration Enhancements [#1497, #2253, #1904, #2232, #1850, #2218, #2391, #2396, #2542, #2622, #2637, #2790] - Overall Code Improvements [#2316, #2284, #2351, #2402, #2410, #2419, #2422, #2443, #2491, #2506, #2610, #2667, #2709, #2731] - use GIT_HEAD_OVERRIDE to pass the git rev to the build - enable keeshare secure (new BR: quazip Qt5) - add BR for the QR code feature: pkgconfig(libqrencode) pkgconfig(Qt5Svg) - workaround for boo#1117355 add BR/R for libgcrypt20-hmac - BR: libcurl-devel - enable dbus support - enable ssh agent and browser support Prevent Klipper from storing secrets in clipboard history (#1969) - update to 2.3.4 - Show all URL schemes in entry view [#1768] - Disable merge when database is locked [#1975] - Fix intermittent crashes with favorite icon downloads [#1980] - Provide potential crash warning to Qt 5.5.x users [#2211] - Disable apply button when creating new entry/group to prevent data loss [#2204] - Multiple SSH Agent fixes [#1981, #2117] - Multiple Browser Integration enhancements [#1993, #2003, #2055, #2116, #2159, #2174, #2185] - Fix browser proxy application not closing properly [#2142] - Add real names and Patreon supporters to about dialog [#2214] - Add settings button to toolbar, Donate button, and Report a Bug button to help menu [#2214] - Fix building with Qt 5.11 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1129=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1129=1 Package List: - openSUSE Leap 15.0 (x86_64): keepassxc-2.4.0-lp150.2.3.1 keepassxc-debuginfo-2.4.0-lp150.2.3.1 keepassxc-debugsource-2.4.0-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): keepassxc-lang-2.4.0-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): keepassxc-2.4.0-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): keepassxc-lang-2.4.0-bp150.2.3.1 References: https://bugzilla.suse.com/1117355

1 0

openSUSE-SU-2019:1128-1: important: Security update for pdns
by opensuse-security＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1128-1 Rating: important References: #1129734 Cross-References: CVE-2019-3871 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pdns fixes the following issue: Security issue fixed: - CVE-2019-3871: Fixed an insufficient validation in the HTTP remote backend which could allow a remote user to cause the HTTP backend to connect to an attacker-specified host instead of the configured one (bsc#1129734). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1128=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1128=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1128=1 Package List: - openSUSE Leap 42.3 (x86_64): pdns-4.0.3-18.1 pdns-backend-geoip-4.0.3-18.1 pdns-backend-geoip-debuginfo-4.0.3-18.1 pdns-backend-godbc-4.0.3-18.1 pdns-backend-godbc-debuginfo-4.0.3-18.1 pdns-backend-ldap-4.0.3-18.1 pdns-backend-ldap-debuginfo-4.0.3-18.1 pdns-backend-lua-4.0.3-18.1 pdns-backend-lua-debuginfo-4.0.3-18.1 pdns-backend-mydns-4.0.3-18.1 pdns-backend-mydns-debuginfo-4.0.3-18.1 pdns-backend-mysql-4.0.3-18.1 pdns-backend-mysql-debuginfo-4.0.3-18.1 pdns-backend-postgresql-4.0.3-18.1 pdns-backend-postgresql-debuginfo-4.0.3-18.1 pdns-backend-remote-4.0.3-18.1 pdns-backend-remote-debuginfo-4.0.3-18.1 pdns-backend-sqlite3-4.0.3-18.1 pdns-backend-sqlite3-debuginfo-4.0.3-18.1 pdns-debuginfo-4.0.3-18.1 pdns-debugsource-4.0.3-18.1 - openSUSE Leap 15.0 (x86_64): pdns-4.1.2-lp150.3.10.1 pdns-backend-geoip-4.1.2-lp150.3.10.1 pdns-backend-geoip-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-godbc-4.1.2-lp150.3.10.1 pdns-backend-godbc-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-ldap-4.1.2-lp150.3.10.1 pdns-backend-ldap-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-lua-4.1.2-lp150.3.10.1 pdns-backend-lua-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-mydns-4.1.2-lp150.3.10.1 pdns-backend-mydns-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-mysql-4.1.2-lp150.3.10.1 pdns-backend-mysql-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-postgresql-4.1.2-lp150.3.10.1 pdns-backend-postgresql-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-remote-4.1.2-lp150.3.10.1 pdns-backend-remote-debuginfo-4.1.2-lp150.3.10.1 pdns-backend-sqlite3-4.1.2-lp150.3.10.1 pdns-backend-sqlite3-debuginfo-4.1.2-lp150.3.10.1 pdns-debuginfo-4.1.2-lp150.3.10.1 pdns-debugsource-4.1.2-lp150.3.10.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): pdns-4.1.2-bp150.2.6.1 pdns-backend-geoip-4.1.2-bp150.2.6.1 pdns-backend-godbc-4.1.2-bp150.2.6.1 pdns-backend-ldap-4.1.2-bp150.2.6.1 pdns-backend-lua-4.1.2-bp150.2.6.1 pdns-backend-mydns-4.1.2-bp150.2.6.1 pdns-backend-mysql-4.1.2-bp150.2.6.1 pdns-backend-postgresql-4.1.2-bp150.2.6.1 pdns-backend-remote-4.1.2-bp150.2.6.1 pdns-backend-sqlite3-4.1.2-bp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-3871.html https://bugzilla.suse.com/1129734

1 0

openSUSE-SU-2019:1125-1: moderate: Security update for ansible
by opensuse-security＠opensuse.org 03 Apr '19

03 Apr '19

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1125-1 Rating: moderate References: #1099808 #1102126 #1109957 #1112959 #1116587 #1118896 #1126503 Cross-References: CVE-2018-10875 CVE-2018-16837 CVE-2018-16859 CVE-2018-16876 CVE-2019-3828 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update for ansible to version 2.7.8 fixes the following issues: Security issues fixed: - CVE-2018-16837: Fixed an information leak in user module (bsc#1112959). - CVE-2018-16859: Fixed an issue which clould allow logging of password in plaintext in Windows powerShell (bsc#1116587). - CVE-2019-3828: Fixed a path traversal vulnerability in fetch module (bsc#1126503). - CVE-2018-10875: Fixed a potential code execution in ansible.cfg (bsc#1099808). - CVE-2018-16876: Fixed an issue which could allow information disclosure in vvv+ mode with no_log on (bsc#1118896). Other issues addressed: - prepare update to 2.7.8 for multiple releases (boo#1102126, boo#1109957) Release notes: https://github.com/ansible/ansible/blob/stable-2.7/changelogs/CHANGELOG-v2. 7.rst#id1 Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1125=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ansible-2.7.8-9.1 References: https://www.suse.com/security/cve/CVE-2018-10875.html https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2018-16859.html https://www.suse.com/security/cve/CVE-2018-16876.html https://www.suse.com/security/cve/CVE-2019-3828.html https://bugzilla.suse.com/1099808 https://bugzilla.suse.com/1102126 https://bugzilla.suse.com/1109957 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1116587 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503

1 0

openSUSE-SU-2019:1123-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1123-1 Rating: moderate References: #1129633 Cross-References: CVE-2019-9894 CVE-2019-9895 CVE-2019-9896 CVE-2019-9897 CVE-2019-9898 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for putty fixes the following issues: Update to new upstream release 0.71 [boo#1129633] * CVE-2019-9894: Fixed a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification potential recycling of random numbers used in cryptography. * CVE-2019-9895: Fixed a remotely triggerable buffer overflow in any kind of server-to-client forwarding. * CVE-2019-9897: Fixed multiple denial-of-service attacks that can be triggered by writing to the terminal. * CVE-2019-9898: Fixed potential recycling of random numbers used in cryptography * CVE-2019-9896 (Windows only): Fixed hijacking by a malicious help file in the same directory as the executable * Major rewrite of the crypto code to remove cache and timing side channels. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1123=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): putty-0.71-bp150.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-9894.html https://www.suse.com/security/cve/CVE-2019-9895.html https://www.suse.com/security/cve/CVE-2019-9896.html https://www.suse.com/security/cve/CVE-2019-9897.html https://www.suse.com/security/cve/CVE-2019-9898.html https://bugzilla.suse.com/1129633

1 0

openSUSE-RU-2019:1124-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1124-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: spec-cleaner was updated to 1.1.3 boo#1099674: * Convert pytest calls to macros * Fix errors in %python_expand line expansions * update licenses list * Expand more excludes for curlification * Do not add accidental newlines to complex conditions This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1124=1 Package List: - openSUSE Backports SLE-15 (noarch): spec-cleaner-1.1.3-bp150.61.1 spec-cleaner-format_spec_file-1.1.3-bp150.61.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-SU-2019:1105-1: moderate: Security update for openssl-1_0_0
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for openssl-1_0_0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1105-1 Rating: moderate References: #1117951 #1127080 Cross-References: CVE-2019-1559 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for openssl-1_0_0 fixes the following issues: Security issues fixed: - The 9 Lives of Bleichenbacher's CAT: Cache Attacks on TLS Implementations (bsc#1117951) - CVE-2019-1559: Fixed OpenSSL 0-byte Record Padding Oracle which under certain circumstances a TLS server can be forced to respond differently to a client and lead to the decryption of the data (bsc#1127080). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1105=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libopenssl-1_0_0-devel-1.0.2p-lp150.2.13.1 libopenssl1_0_0-1.0.2p-lp150.2.13.1 libopenssl1_0_0-debuginfo-1.0.2p-lp150.2.13.1 libopenssl1_0_0-hmac-1.0.2p-lp150.2.13.1 openssl-1_0_0-1.0.2p-lp150.2.13.1 openssl-1_0_0-cavs-1.0.2p-lp150.2.13.1 openssl-1_0_0-cavs-debuginfo-1.0.2p-lp150.2.13.1 openssl-1_0_0-debuginfo-1.0.2p-lp150.2.13.1 openssl-1_0_0-debugsource-1.0.2p-lp150.2.13.1 - openSUSE Leap 15.0 (noarch): openssl-1_0_0-doc-1.0.2p-lp150.2.13.1 - openSUSE Leap 15.0 (x86_64): libopenssl-1_0_0-devel-32bit-1.0.2p-lp150.2.13.1 libopenssl1_0_0-32bit-1.0.2p-lp150.2.13.1 libopenssl1_0_0-32bit-debuginfo-1.0.2p-lp150.2.13.1 libopenssl1_0_0-hmac-32bit-1.0.2p-lp150.2.13.1 References: https://www.suse.com/security/cve/CVE-2019-1559.html https://bugzilla.suse.com/1117951 https://bugzilla.suse.com/1127080

1 0

openSUSE-SU-2019:1121-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1121-1 Rating: important References: #1129186 Cross-References: CVE-2019-3838 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issue: Security issue fixed: - CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER (bsc#1129186). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1121=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ghostscript-9.26a-lp150.2.17.2 ghostscript-debuginfo-9.26a-lp150.2.17.2 ghostscript-debugsource-9.26a-lp150.2.17.2 ghostscript-devel-9.26a-lp150.2.17.2 ghostscript-mini-9.26a-lp150.2.17.2 ghostscript-mini-debuginfo-9.26a-lp150.2.17.2 ghostscript-mini-debugsource-9.26a-lp150.2.17.2 ghostscript-mini-devel-9.26a-lp150.2.17.2 ghostscript-x11-9.26a-lp150.2.17.2 ghostscript-x11-debuginfo-9.26a-lp150.2.17.2 References: https://www.suse.com/security/cve/CVE-2019-3838.html https://bugzilla.suse.com/1129186

1 0

openSUSE-SU-2019:1112-1: Security update for python-Flask
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for python-Flask ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1112-1 Rating: low References: #1106279 Cross-References: CVE-2018-1000656 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Flask to version 0.12.4 fixes the following issues: Security issue fixed: - CVE-2018-1000656: Fixed an improper input validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. (bsc#1106279) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1112=1 Package List: - openSUSE Leap 15.0 (noarch): python2-Flask-0.12.4-lp150.2.3.1 python2-Flask-doc-0.12.4-lp150.2.3.1 python3-Flask-0.12.4-lp150.2.3.1 python3-Flask-doc-0.12.4-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000656.html https://bugzilla.suse.com/1106279

1 0

openSUSE-SU-2019:1107-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1107-1 Rating: moderate References: #1126340 Cross-References: CVE-2019-8955 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tor to version 0.3.4.11 fixes the following issues: Security issue fixed: - CVE-2019-8955: Fixed a vulnerability in the KIST cell scheduler which could lead to memory exhaustion and finally Denial-of-Service (bsc#1126340). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1107=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1107=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1107=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1107=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): tor-0.3.4.11-21.1 tor-debuginfo-0.3.4.11-21.1 tor-debugsource-0.3.4.11-21.1 - openSUSE Leap 15.0 (x86_64): tor-0.3.4.11-lp150.22.1 tor-debuginfo-0.3.4.11-lp150.22.1 tor-debugsource-0.3.4.11-lp150.22.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): tor-0.3.4.11-bp150.3.6.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): tor-0.3.4.11-20.1 References: https://www.suse.com/security/cve/CVE-2019-8955.html https://bugzilla.suse.com/1126340

1 0

openSUSE-SU-2019:1118-1: moderate: Security update for libjpeg-turbo
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for libjpeg-turbo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1118-1 Rating: moderate References: #1096209 #1098155 #1128712 Cross-References: CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for libjpeg-turbo fixes the following issues: The following security vulnerabilities were addressed: - CVE-2018-14498: Fixed a heap-based buffer over read in get_8bit_row function which could allow to an attacker to cause denial of service (bsc#1128712). - CVE-2018-11813: Fixed the end-of-file mishandling in read_pixel in rdtarga.c, which allowed remote attackers to cause a denial-of-service via crafted JPG files due to a large loop (bsc#1096209) - CVE-2018-1152: Fixed a denial of service in start_input_bmp() rdbmp.c caused by a divide by zero when processing a crafted BMP image (bsc#1098155) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1118=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libjpeg-turbo-1.5.3-lp150.4.3.2 libjpeg-turbo-debuginfo-1.5.3-lp150.4.3.2 libjpeg-turbo-debugsource-1.5.3-lp150.4.3.2 libjpeg62-62.2.0-lp150.4.3.2 libjpeg62-debuginfo-62.2.0-lp150.4.3.2 libjpeg62-devel-62.2.0-lp150.4.3.2 libjpeg62-turbo-1.5.3-lp150.4.3.2 libjpeg62-turbo-debugsource-1.5.3-lp150.4.3.2 libjpeg8-8.1.2-lp150.4.3.2 libjpeg8-debuginfo-8.1.2-lp150.4.3.2 libjpeg8-devel-8.1.2-lp150.4.3.2 libturbojpeg0-8.1.2-lp150.4.3.2 libturbojpeg0-debuginfo-8.1.2-lp150.4.3.2 - openSUSE Leap 15.0 (x86_64): libjpeg62-32bit-62.2.0-lp150.4.3.2 libjpeg62-32bit-debuginfo-62.2.0-lp150.4.3.2 libjpeg62-devel-32bit-62.2.0-lp150.4.3.2 libjpeg8-32bit-8.1.2-lp150.4.3.2 libjpeg8-32bit-debuginfo-8.1.2-lp150.4.3.2 libjpeg8-devel-32bit-8.1.2-lp150.4.3.2 libturbojpeg0-32bit-8.1.2-lp150.4.3.2 libturbojpeg0-32bit-debuginfo-8.1.2-lp150.4.3.2 References: https://www.suse.com/security/cve/CVE-2018-1152.html https://www.suse.com/security/cve/CVE-2018-11813.html https://www.suse.com/security/cve/CVE-2018-14498.html https://bugzilla.suse.com/1096209 https://bugzilla.suse.com/1098155 https://bugzilla.suse.com/1128712

1 0

openSUSE-SU-2019:1104-1: important: Security update for python-cryptography, python-pyOpenSSL
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for python-cryptography, python-pyOpenSSL ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1104-1 Rating: important References: #1021578 #1052927 #1111634 #1111635 #1119077 Cross-References: CVE-2018-1000807 CVE-2018-1000808 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has three fixes is now available. Description: This update for python-cryptography, python-pyOpenSSL fixes the following issues: Security issues fixed: - CVE-2018-1000808: A memory leak due to missing reference checking in PKCS#12 store handling was fixed (bsc#1111634) - CVE-2018-1000807: A use-after-free in X509 object handling was fixed (bsc#1111635) This update also contains the following tracked bug fixes: - avoid bad interaction with python-cryptography package. (bsc#1021578) - Avoid regression accessesing non-existing attribute _from_raw_x509_ptr in object X509 (bsc#1119077) - Add python-setuptools as a requirement. (bsc#1052927) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1104=1 Package List: - openSUSE Leap 42.3 (noarch): python-pyOpenSSL-16.0.0-5.8.2 python-pyOpenSSL-doc-16.0.0-5.8.2 python3-pyOpenSSL-16.0.0-5.8.2 python3-pyOpenSSL-doc-16.0.0-5.8.2 - openSUSE Leap 42.3 (x86_64): python-cryptography-1.3.1-5.3.1 python-cryptography-debuginfo-1.3.1-5.3.1 python-cryptography-debugsource-1.3.1-5.3.1 python3-cryptography-1.3.1-5.3.1 python3-cryptography-debuginfo-1.3.1-5.3.1 References: https://www.suse.com/security/cve/CVE-2018-1000807.html https://www.suse.com/security/cve/CVE-2018-1000808.html https://bugzilla.suse.com/1021578 https://bugzilla.suse.com/1052927 https://bugzilla.suse.com/1111634 https://bugzilla.suse.com/1111635 https://bugzilla.suse.com/1119077

1 0

openSUSE-SU-2019:1107-1: moderate: Security update for tor
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for tor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1107-1 Rating: moderate References: #1126340 Cross-References: CVE-2019-8955 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for tor to version 0.3.4.11 fixes the following issues: Security issue fixed: - CVE-2019-8955: Fixed a vulnerability in the KIST cell scheduler which could lead to memory exhaustion and finally Denial-of-Service (bsc#1126340). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1107=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1107=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1107=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): tor-0.3.4.11-21.1 tor-debuginfo-0.3.4.11-21.1 tor-debugsource-0.3.4.11-21.1 - openSUSE Leap 15.0 (x86_64): tor-0.3.4.11-lp150.22.1 tor-debuginfo-0.3.4.11-lp150.22.1 tor-debugsource-0.3.4.11-lp150.22.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): tor-0.3.4.11-bp150.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-8955.html https://bugzilla.suse.com/1126340

1 0

openSUSE-SU-2019:1114-1: important: Security update for perl-Email-Address
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for perl-Email-Address ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1114-1 Rating: important References: #1098368 Cross-References: CVE-2018-12558 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for perl-Email-Address to version 1.912 fixes the following issue: Security issue fixed: - CVE-2018-12558: Fixed a vulnerability which could allow Denial of Service in perl module Email::Address (bsc#1098368). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1114=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1114=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1114=1 Package List: - openSUSE Leap 42.3 (noarch): perl-Email-Address-1.912-5.3.1 - openSUSE Leap 15.0 (noarch): perl-Email-Address-1.912-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): perl-Email-Address-1.912-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12558.html https://bugzilla.suse.com/1098368

1 0

openSUSE-SU-2019:1119-1: important: Security update for ghostscript
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1119-1 Rating: important References: #1129186 Cross-References: CVE-2019-3838 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issue: Security issue fixed: - CVE-2019-3838: Fixed a vulnerability which made forceput operator in DefineResource to be still accessible which could allow access to file system outside of the constraints of -dSAFER (bsc#1129186). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1119=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ghostscript-9.26a-14.18.1 ghostscript-debuginfo-9.26a-14.18.1 ghostscript-debugsource-9.26a-14.18.1 ghostscript-devel-9.26a-14.18.1 ghostscript-mini-9.26a-14.18.1 ghostscript-mini-debuginfo-9.26a-14.18.1 ghostscript-mini-debugsource-9.26a-14.18.1 ghostscript-mini-devel-9.26a-14.18.1 ghostscript-x11-9.26a-14.18.1 ghostscript-x11-debuginfo-9.26a-14.18.1 References: https://www.suse.com/security/cve/CVE-2019-3838.html https://bugzilla.suse.com/1129186

1 0

openSUSE-SU-2019:1110-1: moderate: Security update for lftp
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for lftp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1110-1 Rating: moderate References: #1103367 #1120946 Cross-References: CVE-2018-10916 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for lftp fixes the following issues: Security issue fixed: - CVE-2018-10916: Fixed an improper file name sanitization which could lead to loss of integrity of the local system (bsc#1103367). Other issue addressed: - The SSH login handling code detects password prompts more reliably (bsc#1120946). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1110=1 Package List: - openSUSE Leap 15.0 (x86_64): lftp-4.8.3-lp150.3.3.1 lftp-debuginfo-4.8.3-lp150.3.3.1 lftp-debugsource-4.8.3-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-10916.html https://bugzilla.suse.com/1103367 https://bugzilla.suse.com/1120946

1 0

openSUSE-SU-2019:1117-1: moderate: Security update for unzip
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for unzip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1117-1 Rating: moderate References: #1110194 Cross-References: CVE-2018-18384 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1117=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): unzip-6.00-lp150.8.3 unzip-debuginfo-6.00-lp150.8.3 unzip-debugsource-6.00-lp150.8.3 unzip-doc-6.00-lp150.8.3 - openSUSE Leap 15.0 (x86_64): unzip-rcc-6.00-lp150.8.3 unzip-rcc-debuginfo-6.00-lp150.8.3 unzip-rcc-debugsource-6.00-lp150.8.3 References: https://www.suse.com/security/cve/CVE-2018-18384.html https://bugzilla.suse.com/1110194

1 0

openSUSE-SU-2019:1116-1: moderate: Security update for libqt5-qtsvg
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for libqt5-qtsvg ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1116-1 Rating: moderate References: #1118599 Cross-References: CVE-2018-19869 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtsvg fixes the following issues: Security issues fixed: - CVE-2018-19869: Fixed Denial of Service when parsing malformed URL reference (bsc#1118599) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1116=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libQt5Svg5-5.9.4-lp150.2.3.2 libQt5Svg5-debuginfo-5.9.4-lp150.2.3.2 libqt5-qtsvg-debugsource-5.9.4-lp150.2.3.2 libqt5-qtsvg-devel-5.9.4-lp150.2.3.2 libqt5-qtsvg-examples-5.9.4-lp150.2.3.2 libqt5-qtsvg-examples-debuginfo-5.9.4-lp150.2.3.2 - openSUSE Leap 15.0 (x86_64): libQt5Svg5-32bit-5.9.4-lp150.2.3.2 libQt5Svg5-32bit-debuginfo-5.9.4-lp150.2.3.2 libqt5-qtsvg-devel-32bit-5.9.4-lp150.2.3.2 - openSUSE Leap 15.0 (noarch): libqt5-qtsvg-private-headers-devel-5.9.4-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2018-19869.html https://bugzilla.suse.com/1118599

1 0

openSUSE-SU-2019:1108-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1108-1 Rating: moderate References: #1127367 #1127369 #1127370 Cross-References: CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for wireshark to version 2.4.13 fixes the following issues: Security issues fixed: - CVE-2019-9214: Avoided a dereference of a null coversation which could make RPCAP dissector crash (bsc#1127367). - CVE-2019-9209: Fixed a buffer overflow in time values which could make ASN.1 BER and related dissectors crash (bsc#1127369). - CVE-2019-9208: Fixed a null pointer dereference which could make TCAP dissector crash (bsc#1127370). Release notes: https://www.wireshark.org/docs/relnotes/wireshark-2.4.13.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1108=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.13-lp150.2.23.1 libwireshark9-debuginfo-2.4.13-lp150.2.23.1 libwiretap7-2.4.13-lp150.2.23.1 libwiretap7-debuginfo-2.4.13-lp150.2.23.1 libwscodecs1-2.4.13-lp150.2.23.1 libwscodecs1-debuginfo-2.4.13-lp150.2.23.1 libwsutil8-2.4.13-lp150.2.23.1 libwsutil8-debuginfo-2.4.13-lp150.2.23.1 wireshark-2.4.13-lp150.2.23.1 wireshark-debuginfo-2.4.13-lp150.2.23.1 wireshark-debugsource-2.4.13-lp150.2.23.1 wireshark-devel-2.4.13-lp150.2.23.1 wireshark-ui-qt-2.4.13-lp150.2.23.1 wireshark-ui-qt-debuginfo-2.4.13-lp150.2.23.1 References: https://www.suse.com/security/cve/CVE-2019-9208.html https://www.suse.com/security/cve/CVE-2019-9209.html https://www.suse.com/security/cve/CVE-2019-9214.html https://bugzilla.suse.com/1127367 https://bugzilla.suse.com/1127369 https://bugzilla.suse.com/1127370

1 0

openSUSE-RU-2019:1122-1: Recommended update for fmt
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for fmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1122-1 Rating: low References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for introduces fmt package: Fmt is a formatting library for C++. It can be used as an alternative to (s)printf and IOStreams. It is required as build dependency of other packages, such as kodi Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1122=1 Package List: - openSUSE Leap 15.0 (x86_64): fmt-debugsource-5.3.0-lp150.2.1 fmt-devel-5.3.0-lp150.2.1 libfmt5-5.3.0-lp150.2.1 libfmt5-debuginfo-5.3.0-lp150.2.1 References:

1 0

openSUSE-SU-2019:1111-1: important: Security update for openwsman
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for openwsman ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1111-1 Rating: important References: #1092206 #1122623 Cross-References: CVE-2019-3816 CVE-2019-3833 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openwsman fixes the following issues: Security issues fixed: - CVE-2019-3816: Fixed a vulnerability in openwsmand deamon which could lead to arbitary file disclosure (bsc#1122623). - CVE-2019-3833: Fixed a vulnerability in process_connection() which could allow an attacker to trigger an infinite loop which leads to Denial of Service (bsc#1122623). Other issues addressed: - Added OpenSSL 1.1 compatibility - Compilation in debug mode fixed - Directory listing without authentication fixed (bsc#1092206). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1111=1 Package List: - openSUSE Leap 15.0 (x86_64): libwsman-devel-2.6.7-lp150.2.3.1 libwsman3-2.6.7-lp150.2.3.1 libwsman3-debuginfo-2.6.7-lp150.2.3.1 libwsman_clientpp-devel-2.6.7-lp150.2.3.1 libwsman_clientpp1-2.6.7-lp150.2.3.1 libwsman_clientpp1-debuginfo-2.6.7-lp150.2.3.1 openwsman-debuginfo-2.6.7-lp150.2.3.1 openwsman-debugsource-2.6.7-lp150.2.3.1 openwsman-java-2.6.7-lp150.2.3.1 openwsman-perl-2.6.7-lp150.2.3.1 openwsman-perl-debuginfo-2.6.7-lp150.2.3.1 openwsman-ruby-2.6.7-lp150.2.3.1 openwsman-ruby-debuginfo-2.6.7-lp150.2.3.1 openwsman-ruby-docs-2.6.7-lp150.2.3.1 openwsman-server-2.6.7-lp150.2.3.1 openwsman-server-debuginfo-2.6.7-lp150.2.3.1 openwsman-server-plugin-ruby-2.6.7-lp150.2.3.1 openwsman-server-plugin-ruby-debuginfo-2.6.7-lp150.2.3.1 python3-openwsman-2.6.7-lp150.2.3.1 python3-openwsman-debuginfo-2.6.7-lp150.2.3.1 winrs-2.6.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-3816.html https://www.suse.com/security/cve/CVE-2019-3833.html https://bugzilla.suse.com/1092206 https://bugzilla.suse.com/1122623

1 0

openSUSE-SU-2019:1120-1: moderate: Security update for libgxps
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for libgxps ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1120-1 Rating: moderate References: #1092125 Cross-References: CVE-2018-10733 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libgxps fixes the following issues: - CVE-2018-10733: Fixed a heap-based buffer over-read issue in ft_font_face_hash (bsc#1092125). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1120=1 Package List: - openSUSE Leap 15.0 (x86_64): libgxps-debuginfo-0.3.0-lp150.3.3.2 libgxps-debugsource-0.3.0-lp150.3.3.2 libgxps-devel-0.3.0-lp150.3.3.2 libgxps-tools-0.3.0-lp150.3.3.2 libgxps-tools-debuginfo-0.3.0-lp150.3.3.2 libgxps2-0.3.0-lp150.3.3.2 libgxps2-debuginfo-0.3.0-lp150.3.3.2 typelib-1_0-GXPS-0_1-0.3.0-lp150.3.3.2 References: https://www.suse.com/security/cve/CVE-2018-10733.html https://bugzilla.suse.com/1092125

1 0

openSUSE-SU-2019:1113-1: moderate: Security update for putty
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1113-1 Rating: moderate References: #1129633 Cross-References: CVE-2019-9894 CVE-2019-9895 CVE-2019-9896 CVE-2019-9897 CVE-2019-9898 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for putty fixes the following issues: Update to new upstream release 0.71 [boo#1129633] * CVE-2019-9894: Fixed a remotely triggerable memory overwrite in RSA key exchange, which can occur before host key verification potential recycling of random numbers used in cryptography. * CVE-2019-9895: Fixed a remotely triggerable buffer overflow in any kind of server-to-client forwarding. * CVE-2019-9897: Fixed multiple denial-of-service attacks that can be triggered by writing to the terminal. * CVE-2019-9898: Fixed potential recycling of random numbers used in cryptography * CVE-2019-9896 (Windows only): Fixed hijacking by a malicious help file in the same directory as the executable * Major rewrite of the crypto code to remove cache and timing side channels. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1113=1 Package List: - openSUSE Leap 15.0 (x86_64): putty-0.71-lp150.9.1 putty-debuginfo-0.71-lp150.9.1 putty-debugsource-0.71-lp150.9.1 References: https://www.suse.com/security/cve/CVE-2019-9894.html https://www.suse.com/security/cve/CVE-2019-9895.html https://www.suse.com/security/cve/CVE-2019-9896.html https://www.suse.com/security/cve/CVE-2019-9897.html https://www.suse.com/security/cve/CVE-2019-9898.html https://bugzilla.suse.com/1129633

1 0

openSUSE-SU-2019:1109-1: moderate: Security update for libssh2_org
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1109-1 Rating: moderate References: #1128471 #1128472 #1128474 #1128476 #1128480 #1128481 #1128490 #1128492 #1128493 Cross-References: CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for libssh2_org fixes the following issues: Security issues fixed: - CVE-2019-3861: Fixed Out-of-bounds reads with specially crafted SSH packets (bsc#1128490). - CVE-2019-3862: Fixed Out-of-bounds memory comparison with specially crafted message channel request packet (bsc#1128492). - CVE-2019-3860: Fixed Out-of-bounds reads with specially crafted SFTP packets (bsc#1128481). - CVE-2019-3863: Fixed an Integer overflow in user authenicate keyboard interactive which could allow out-of-bounds writes with specially crafted keyboard responses (bsc#1128493). - CVE-2019-3856: Fixed a potential Integer overflow in keyboard interactive handling which could allow out-of-bounds write with specially crafted payload (bsc#1128472). - CVE-2019-3859: Fixed Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require and _libssh2_packet_requirev (bsc#1128480). - CVE-2019-3855: Fixed a potential Integer overflow in transport read which could allow out-of-bounds write with specially crafted payload (bsc#1128471). - CVE-2019-3858: Fixed a potential zero-byte allocation which could lead to an out-of-bounds read with a specially crafted SFTP packet (bsc#1128476). - CVE-2019-3857: Fixed a potential Integer overflow which could lead to zero-byte allocation and out-of-bounds with specially crafted message channel request SSH packet (bsc#1128474). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1109=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libssh2-1-1.8.0-lp150.3.3.1 libssh2-1-debuginfo-1.8.0-lp150.3.3.1 libssh2-devel-1.8.0-lp150.3.3.1 libssh2_org-debugsource-1.8.0-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libssh2-1-32bit-1.8.0-lp150.3.3.1 libssh2-1-32bit-debuginfo-1.8.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-3855.html https://www.suse.com/security/cve/CVE-2019-3856.html https://www.suse.com/security/cve/CVE-2019-3857.html https://www.suse.com/security/cve/CVE-2019-3858.html https://www.suse.com/security/cve/CVE-2019-3859.html https://www.suse.com/security/cve/CVE-2019-3860.html https://www.suse.com/security/cve/CVE-2019-3861.html https://www.suse.com/security/cve/CVE-2019-3862.html https://www.suse.com/security/cve/CVE-2019-3863.html https://bugzilla.suse.com/1128471 https://bugzilla.suse.com/1128472 https://bugzilla.suse.com/1128474 https://bugzilla.suse.com/1128476 https://bugzilla.suse.com/1128480 https://bugzilla.suse.com/1128481 https://bugzilla.suse.com/1128490 https://bugzilla.suse.com/1128492 https://bugzilla.suse.com/1128493

1 0

openSUSE-SU-2019:1115-1: moderate: Security update for libqt5-qtimageformats
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for libqt5-qtimageformats ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1115-1 Rating: moderate References: #1118598 Cross-References: CVE-2018-19871 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqt5-qtimageformats fixes the following issues: Security issues fixed: - CVE-2018-19871: Fixed CPU exhaustion in QTgaFile (bsc#1118598) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1115=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libqt5-qtimageformats-5.9.4-lp150.2.3.2 libqt5-qtimageformats-debuginfo-5.9.4-lp150.2.3.2 libqt5-qtimageformats-debugsource-5.9.4-lp150.2.3.2 libqt5-qtimageformats-devel-5.9.4-lp150.2.3.2 - openSUSE Leap 15.0 (x86_64): libqt5-qtimageformats-32bit-5.9.4-lp150.2.3.2 libqt5-qtimageformats-32bit-debuginfo-5.9.4-lp150.2.3.2 References: https://www.suse.com/security/cve/CVE-2018-19871.html https://bugzilla.suse.com/1118598

1 0

openSUSE-SU-2019:1106-1: important: Security update for python-azure-agent
by opensuse-security＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Security Update: Security update for python-azure-agent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1106-1 Rating: important References: #1127838 Cross-References: CVE-2019-0804 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-azure-agent fixes the following issues: - CVE-2019-0804: An issue with swapfile handling in the agent created a data leak situation that exposes system memory data. (bsc#1127838) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1106=1 Package List: - openSUSE Leap 15.0 (noarch): python-azure-agent-2.2.36-lp150.5.10.1 python-azure-agent-test-2.2.36-lp150.5.10.1 References: https://www.suse.com/security/cve/CVE-2019-0804.html https://bugzilla.suse.com/1127838

1 0

openSUSE-RU-2019:1103-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1103-1 Rating: moderate References: #1099674 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner fixes the following issues: spec-cleaner was updated to 1.1.3 boo#1099674: * Convert pytest calls to macros * Fix errors in %python_expand line expansions * update licenses list * Expand more excludes for curlification * Do not add accidental newlines to complex conditions Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1103=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1103=1 Package List: - openSUSE Leap 42.3 (noarch): spec-cleaner-1.1.3-60.1 spec-cleaner-format_spec_file-1.1.3-60.1 - openSUSE Leap 15.0 (noarch): spec-cleaner-1.1.3-lp150.61.1 spec-cleaner-format_spec_file-1.1.3-lp150.61.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:1099-1: moderate: Recommended update for firewalld
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for firewalld ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1099-1 Rating: moderate References: #1122151 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for firewalld fixes the following issues: - Fix --runtime-to-permanent error when NetworkMananger is not used. (bsc#1122151) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1099=1 Package List: - openSUSE Leap 15.0 (noarch): firewall-applet-0.5.5-lp150.2.22.2 firewall-config-0.5.5-lp150.2.22.2 firewall-macros-0.5.5-lp150.2.22.2 firewalld-0.5.5-lp150.2.22.2 firewalld-lang-0.5.5-lp150.2.22.2 python3-firewall-0.5.5-lp150.2.22.2 References: https://bugzilla.suse.com/1122151

1 0

openSUSE-RU-2019:1094-1: moderate: Recommended update for yast2-iscsi-client
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for yast2-iscsi-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1094-1 Rating: moderate References: #1099691 #1103681 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2-iscsi-client fixes the following issues: - Fix detection of service current status (bsc#1103681) - Added additional searchkeys to desktop file (fate#321043, bsc#1099691) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1094=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-iscsi-client-4.0.2-lp150.2.3.1 References: https://bugzilla.suse.com/1099691 https://bugzilla.suse.com/1103681

1 0

openSUSE-RU-2019:1100-1: moderate: Recommended update for glibc
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for glibc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1100-1 Rating: moderate References: #1063675 #1112570 #1114984 #1114993 #1126590 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for glibc fixes the following issues: - Fix Haswell CPU string flags. (bsc#1114984) - Fix waiters-after-spinning case. (bsc#1114993) - Do not relocate absolute symbols. (bsc#1112570) - Add glibc-locale-base subpackage containing only C, C.UTF-8 and en_US.UTF-8 locales. (fate#326551) - Add HWCAP_ATOMICS to HWCAP_IMPORTANT (fate#325962) - Remove slow paths from math routines. (fate#325815, fate#325879, fate#325880, fate#325881, fate#325882) - Add MAP_SYNC from Linux 4.15 (bsc#1126590) - Add MAP_SHARED_VALIDATE from Linux 4.15 (bsc#1126590) - nptl: Preserve error in setxid thread broadcast in coredumps (bsc#1063675, BZ #22153) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1100=1 Package List: - openSUSE Leap 15.0 (i586 i686 x86_64): glibc-2.26-lp150.11.14.2 glibc-debuginfo-2.26-lp150.11.14.2 glibc-debugsource-2.26-lp150.11.14.2 glibc-devel-2.26-lp150.11.14.2 glibc-devel-debuginfo-2.26-lp150.11.14.2 glibc-devel-static-2.26-lp150.11.14.2 glibc-locale-2.26-lp150.11.14.2 glibc-locale-base-2.26-lp150.11.14.2 glibc-locale-base-debuginfo-2.26-lp150.11.14.2 glibc-profile-2.26-lp150.11.14.2 - openSUSE Leap 15.0 (i586 x86_64): glibc-extra-2.26-lp150.11.14.2 glibc-extra-debuginfo-2.26-lp150.11.14.2 glibc-utils-2.26-lp150.11.14.2 glibc-utils-debuginfo-2.26-lp150.11.14.2 glibc-utils-src-debugsource-2.26-lp150.11.14.2 nscd-2.26-lp150.11.14.2 nscd-debuginfo-2.26-lp150.11.14.2 - openSUSE Leap 15.0 (x86_64): glibc-32bit-2.26-lp150.11.14.2 glibc-32bit-debuginfo-2.26-lp150.11.14.2 glibc-devel-32bit-2.26-lp150.11.14.2 glibc-devel-32bit-debuginfo-2.26-lp150.11.14.2 glibc-devel-static-32bit-2.26-lp150.11.14.2 glibc-locale-base-32bit-2.26-lp150.11.14.2 glibc-locale-base-32bit-debuginfo-2.26-lp150.11.14.2 glibc-profile-32bit-2.26-lp150.11.14.2 glibc-utils-32bit-2.26-lp150.11.14.2 glibc-utils-32bit-debuginfo-2.26-lp150.11.14.2 - openSUSE Leap 15.0 (noarch): glibc-html-2.26-lp150.11.14.2 glibc-i18ndata-2.26-lp150.11.14.2 glibc-info-2.26-lp150.11.14.2 References: https://bugzilla.suse.com/1063675 https://bugzilla.suse.com/1112570 https://bugzilla.suse.com/1114984 https://bugzilla.suse.com/1114993 https://bugzilla.suse.com/1126590

1 0

openSUSE-RU-2019:1091-1: Recommended update for gpgme
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for gpgme ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1091-1 Rating: low References: #1121051 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gpgme provides the following fix: - Re-generate keys in Qt tests to not expire. (bsc#1121051) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1091=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): gpgme-1.10.0-lp150.3.3.1 gpgme-debuginfo-1.10.0-lp150.3.3.1 gpgme-debugsource-1.10.0-lp150.3.3.1 libgpgme-devel-1.10.0-lp150.3.3.1 libgpgme11-1.10.0-lp150.3.3.1 libgpgme11-debuginfo-1.10.0-lp150.3.3.1 libgpgmepp-devel-1.10.0-lp150.3.3.1 libgpgmepp6-1.10.0-lp150.3.3.1 libgpgmepp6-debuginfo-1.10.0-lp150.3.3.1 libqgpgme-devel-1.10.0-lp150.3.3.1 libqgpgme7-1.10.0-lp150.3.3.1 libqgpgme7-debuginfo-1.10.0-lp150.3.3.1 python2-gpg-1.10.0-lp150.3.3.1 python2-gpg-debuginfo-1.10.0-lp150.3.3.1 python3-gpg-1.10.0-lp150.3.3.1 python3-gpg-debuginfo-1.10.0-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): libgpgme11-32bit-1.10.0-lp150.3.3.1 libgpgme11-32bit-debuginfo-1.10.0-lp150.3.3.1 libgpgmepp6-32bit-1.10.0-lp150.3.3.1 libgpgmepp6-32bit-debuginfo-1.10.0-lp150.3.3.1 libqgpgme7-32bit-1.10.0-lp150.3.3.1 libqgpgme7-32bit-debuginfo-1.10.0-lp150.3.3.1 References: https://bugzilla.suse.com/1121051

1 0

openSUSE-RU-2019:1097-1: moderate: Recommended update for cyrus-sasl
by maintenance＠opensuse.org 02 Apr '19

02 Apr '19

openSUSE Recommended Update: Recommended update for cyrus-sasl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1097-1 Rating: moderate References: #1044840 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cyrus-sasl provides the following fix: - Fix a problem that was causing syslog to be polluted with messages "GSSAPI client step 1". By server context the connection will be sent to the log function but the client content does not have log level information, so there is no way to stop DEBUG level logs. (bsc#1044840) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1097=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): cyrus-sasl-2.1.26-lp150.4.3.2 cyrus-sasl-crammd5-2.1.26-lp150.4.3.2 cyrus-sasl-crammd5-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-debugsource-2.1.26-lp150.4.3.2 cyrus-sasl-devel-2.1.26-lp150.4.3.2 cyrus-sasl-digestmd5-2.1.26-lp150.4.3.2 cyrus-sasl-digestmd5-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-gs2-2.1.26-lp150.4.3.2 cyrus-sasl-gs2-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-gssapi-2.1.26-lp150.4.3.2 cyrus-sasl-gssapi-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-ntlm-2.1.26-lp150.4.3.2 cyrus-sasl-ntlm-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-otp-2.1.26-lp150.4.3.2 cyrus-sasl-otp-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-plain-2.1.26-lp150.4.3.2 cyrus-sasl-plain-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-scram-2.1.26-lp150.4.3.2 cyrus-sasl-scram-debuginfo-2.1.26-lp150.4.3.2 libsasl2-3-2.1.26-lp150.4.3.2 libsasl2-3-debuginfo-2.1.26-lp150.4.3.2 - openSUSE Leap 15.0 (x86_64): cyrus-sasl-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-crammd5-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-crammd5-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-devel-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-digestmd5-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-digestmd5-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-gssapi-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-gssapi-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-ldap-auxprop-2.1.26-lp150.4.3.2 cyrus-sasl-ldap-auxprop-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-otp-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-otp-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-plain-32bit-2.1.26-lp150.4.3.2 cyrus-sasl-plain-32bit-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-saslauthd-2.1.26-lp150.4.3.2 cyrus-sasl-saslauthd-debuginfo-2.1.26-lp150.4.3.2 cyrus-sasl-saslauthd-debugsource-2.1.26-lp150.4.3.2 cyrus-sasl-sqlauxprop-2.1.26-lp150.4.3.2 cyrus-sasl-sqlauxprop-debuginfo-2.1.26-lp150.4.3.2 libsasl2-3-32bit-2.1.26-lp150.4.3.2 libsasl2-3-32bit-debuginfo-2.1.26-lp150.4.3.2 References: https://bugzilla.suse.com/1044840

1 0