April 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1168-1: moderate: Recommended update for xmonad
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for xmonad ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1168-1 Rating: moderate References: #1128329 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xmonad fixes the following issues: - Fix focus when pointer entering empty workspace. - Fix issues where xmonad would not start because an incorrect serialized state file was still lying around in the user's home. The patch comes from https://github.com/xmonad/xmonad/pull/91 (boo#1128329). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1168=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le x86_64): ghc-xmonad-0.13-bp150.3.3.1 ghc-xmonad-devel-0.13-bp150.3.3.1 xmonad-0.13-bp150.3.3.1 References: https://bugzilla.suse.com/1128329

1 0

openSUSE-RU-2019:1165-1: moderate: Recommended update for libtirpc
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for libtirpc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1165-1 Rating: moderate References: #1126096 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libtirpc fixes the following issues: - Fixed yp_bind_client_create_v3: RPC: Unknown host error (bsc#1126096). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1165=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libtirpc-debugsource-1.0.1-5.9.1 libtirpc-devel-1.0.1-5.9.1 libtirpc-netconfig-1.0.1-5.9.1 libtirpc3-1.0.1-5.9.1 libtirpc3-debuginfo-1.0.1-5.9.1 - openSUSE Leap 42.3 (x86_64): libtirpc3-32bit-1.0.1-5.9.1 libtirpc3-debuginfo-32bit-1.0.1-5.9.1 References: https://bugzilla.suse.com/1126096

1 0

openSUSE-SU-2019:1161-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1161-1 Rating: moderate References: #1108606 #1115717 #1121626 #1125113 Cross-References: CVE-2018-17000 CVE-2018-19210 CVE-2019-6128 CVE-2019-7663 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for tiff fixes the following issues: Security issues fixed: - CVE-2018-19210: Fixed a NULL pointer dereference in TIFFWriteDirectorySec function (bsc#1115717). - CVE-2018-17000: Fixed a NULL pointer dereference in the _TIFFmemcmp function (bsc#1108606). - CVE-2019-6128: Fixed a memory leak in the TIFFFdOpen function in tif_unix.c (bsc#1121626). - CVE-2019-7663: Fixed an invalid address dereference in the TIFFWriteDirectoryTagTransfer function in libtiff/tif_dirwrite.c (bsc#1125113) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1161=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libtiff-devel-4.0.9-lp150.4.16.1 libtiff5-4.0.9-lp150.4.16.1 libtiff5-debuginfo-4.0.9-lp150.4.16.1 tiff-4.0.9-lp150.4.16.1 tiff-debuginfo-4.0.9-lp150.4.16.1 tiff-debugsource-4.0.9-lp150.4.16.1 - openSUSE Leap 15.0 (x86_64): libtiff-devel-32bit-4.0.9-lp150.4.16.1 libtiff5-32bit-4.0.9-lp150.4.16.1 libtiff5-32bit-debuginfo-4.0.9-lp150.4.16.1 References: https://www.suse.com/security/cve/CVE-2018-17000.html https://www.suse.com/security/cve/CVE-2018-19210.html https://www.suse.com/security/cve/CVE-2019-6128.html https://www.suse.com/security/cve/CVE-2019-7663.html https://bugzilla.suse.com/1108606 https://bugzilla.suse.com/1115717 https://bugzilla.suse.com/1121626 https://bugzilla.suse.com/1125113

1 0

openSUSE-SU-2019:1159-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1159-1 Rating: moderate References: #1119687 Cross-References: CVE-2018-20346 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 to version 3.27.2 fixes the following issue: Security issue fixed: - CVE-2018-20346: Fixed a remote code execution vulnerability in FTS3 (Magellan) (bsc#1119687). Release notes: https://www.sqlite.org/releaselog/3_27_2.html This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1159=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsqlite3-0-3.27.2-lp150.2.3.1 libsqlite3-0-debuginfo-3.27.2-lp150.2.3.1 sqlite3-3.27.2-lp150.2.3.1 sqlite3-debuginfo-3.27.2-lp150.2.3.1 sqlite3-debugsource-3.27.2-lp150.2.3.1 sqlite3-devel-3.27.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libsqlite3-0-32bit-3.27.2-lp150.2.3.1 libsqlite3-0-32bit-debuginfo-3.27.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): sqlite3-doc-3.27.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-20346.html https://bugzilla.suse.com/1119687

1 0

openSUSE-SU-2019:1166-1: Security update for znc
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1166-1 Rating: low References: #1130360 Cross-References: CVE-2019-9917 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for znc to version 1.7.2 fixes the following issue: Security issue fixed: - CVE-2019-9917: Fixed an issue where due to invalid encoding znc was crashing (bsc#1130360). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1166=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1166=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): znc-1.7.2-25.1 znc-debuginfo-1.7.2-25.1 znc-debugsource-1.7.2-25.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-25.1 znc-perl-debuginfo-1.7.2-25.1 znc-python3-1.7.2-25.1 znc-python3-debuginfo-1.7.2-25.1 znc-tcl-1.7.2-25.1 znc-tcl-debuginfo-1.7.2-25.1 - openSUSE Leap 42.3 (noarch): znc-lang-1.7.2-25.1 - openSUSE Leap 15.0 (x86_64): znc-1.7.2-lp150.25.1 znc-debuginfo-1.7.2-lp150.25.1 znc-debugsource-1.7.2-lp150.25.1 znc-devel-1.7.2-lp150.25.1 znc-perl-1.7.2-lp150.25.1 znc-perl-debuginfo-1.7.2-lp150.25.1 znc-python3-1.7.2-lp150.25.1 znc-python3-debuginfo-1.7.2-lp150.25.1 znc-tcl-1.7.2-lp150.25.1 znc-tcl-debuginfo-1.7.2-lp150.25.1 - openSUSE Leap 15.0 (noarch): znc-lang-1.7.2-lp150.25.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): znc-1.7.2-bp150.2.3.1 znc-debuginfo-1.7.2-bp150.2.3.1 znc-debugsource-1.7.2-bp150.2.3.1 znc-devel-1.7.2-bp150.2.3.1 znc-perl-1.7.2-bp150.2.3.1 znc-perl-debuginfo-1.7.2-bp150.2.3.1 znc-python3-1.7.2-bp150.2.3.1 znc-python3-debuginfo-1.7.2-bp150.2.3.1 znc-tcl-1.7.2-bp150.2.3.1 znc-tcl-debuginfo-1.7.2-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): znc-lang-1.7.2-bp150.2.3.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): znc-1.7.2-23.1 znc-1.7.2-25.1 znc-devel-1.7.2-23.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-23.1 znc-perl-1.7.2-25.1 znc-python3-1.7.2-23.1 znc-python3-1.7.2-25.1 znc-tcl-1.7.2-23.1 znc-tcl-1.7.2-25.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): znc-lang-1.7.2-23.1 znc-lang-1.7.2-25.1 References: https://www.suse.com/security/cve/CVE-2019-9917.html https://bugzilla.suse.com/1130360

1 0

openSUSE-SU-2019:1160-1: moderate: Security update for liblouis
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for liblouis ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1160-1 Rating: moderate References: #1094685 #1095189 #1095825 #1095826 #1095827 #1095945 #1097103 #1109319 Cross-References: CVE-2018-11410 CVE-2018-11440 CVE-2018-11577 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-12085 CVE-2018-17294 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 8 vulnerabilities is now available. Description: This update for liblouis fixes the following issues: Security issues fixed: - CVE-2018-17294: Fixed an out of bounds read in matchCurrentInput function which could allow a remote attacker to cause Denail of Service (bsc#1109319). - CVE-2018-11410: Fixed an invalid free in the compileRule function in compileTranslationTable.c (bsc#1094685) - CVE-2018-11440: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (bsc#1095189) - CVE-2018-11577: Fixed a segmentation fault in lou_logPrint in logging.c (bsc#1095945) - CVE-2018-11683: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1095827) - CVE-2018-11684: Fixed stack-based buffer overflow in the function includeFile() in compileTranslationTable.c (bsc#1095826) - CVE-2018-11685: Fixed a stack-based buffer overflow in the function compileHyphenation() in compileTranslationTable.c (bsc#1095825) - CVE-2018-12085: Fixed a stack-based buffer overflow in the function parseChars() in compileTranslationTable.c (different vulnerability than CVE-2018-11440) (bsc#1097103) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1160=1 Package List: - openSUSE Leap 15.0 (x86_64): liblouis-data-3.3.0-lp150.3.3.1 liblouis-debuginfo-3.3.0-lp150.3.3.1 liblouis-debugsource-3.3.0-lp150.3.3.1 liblouis-devel-3.3.0-lp150.3.3.1 liblouis-doc-3.3.0-lp150.3.3.1 liblouis-tools-3.3.0-lp150.3.3.1 liblouis-tools-debuginfo-3.3.0-lp150.3.3.1 liblouis14-3.3.0-lp150.3.3.1 liblouis14-debuginfo-3.3.0-lp150.3.3.1 python3-louis-3.3.0-lp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-11410.html https://www.suse.com/security/cve/CVE-2018-11440.html https://www.suse.com/security/cve/CVE-2018-11577.html https://www.suse.com/security/cve/CVE-2018-11683.html https://www.suse.com/security/cve/CVE-2018-11684.html https://www.suse.com/security/cve/CVE-2018-11685.html https://www.suse.com/security/cve/CVE-2018-12085.html https://www.suse.com/security/cve/CVE-2018-17294.html https://bugzilla.suse.com/1094685 https://bugzilla.suse.com/1095189 https://bugzilla.suse.com/1095825 https://bugzilla.suse.com/1095826 https://bugzilla.suse.com/1095827 https://bugzilla.suse.com/1095945 https://bugzilla.suse.com/1097103 https://bugzilla.suse.com/1109319

1 0

openSUSE-RU-2019:1156-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1156-1 Rating: moderate References: #1095141 #1100864 #1112272 #1116337 #1123814 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for mdadm fixes the following issues: - Fixes a typo in new udev rule (bsc#1116337) - Device names were truncated when calling 'mdadm --detail --export' (bsc#1123814) - Fixes an issue when assemble an md array with huge numbers of DASD devices (bsc#1100864, bsc#1095141) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1156=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mdadm-4.0-5.12.1 mdadm-debuginfo-4.0-5.12.1 mdadm-debugsource-4.0-5.12.1 References: https://bugzilla.suse.com/1095141 https://bugzilla.suse.com/1100864 https://bugzilla.suse.com/1112272 https://bugzilla.suse.com/1116337 https://bugzilla.suse.com/1123814

1 0

openSUSE-SU-2019:1166-1: Security update for znc
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1166-1 Rating: low References: #1130360 Cross-References: CVE-2019-9917 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for znc to version 1.7.2 fixes the following issue: Security issue fixed: - CVE-2019-9917: Fixed an issue where due to invalid encoding znc was crashing (bsc#1130360). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1166=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1166=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): znc-1.7.2-25.1 znc-debuginfo-1.7.2-25.1 znc-debugsource-1.7.2-25.1 znc-devel-1.7.2-25.1 znc-perl-1.7.2-25.1 znc-perl-debuginfo-1.7.2-25.1 znc-python3-1.7.2-25.1 znc-python3-debuginfo-1.7.2-25.1 znc-tcl-1.7.2-25.1 znc-tcl-debuginfo-1.7.2-25.1 - openSUSE Leap 42.3 (noarch): znc-lang-1.7.2-25.1 - openSUSE Leap 15.0 (x86_64): znc-1.7.2-lp150.25.1 znc-debuginfo-1.7.2-lp150.25.1 znc-debugsource-1.7.2-lp150.25.1 znc-devel-1.7.2-lp150.25.1 znc-perl-1.7.2-lp150.25.1 znc-perl-debuginfo-1.7.2-lp150.25.1 znc-python3-1.7.2-lp150.25.1 znc-python3-debuginfo-1.7.2-lp150.25.1 znc-tcl-1.7.2-lp150.25.1 znc-tcl-debuginfo-1.7.2-lp150.25.1 - openSUSE Leap 15.0 (noarch): znc-lang-1.7.2-lp150.25.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): znc-1.7.2-bp150.2.3.1 znc-debuginfo-1.7.2-bp150.2.3.1 znc-debugsource-1.7.2-bp150.2.3.1 znc-devel-1.7.2-bp150.2.3.1 znc-perl-1.7.2-bp150.2.3.1 znc-perl-debuginfo-1.7.2-bp150.2.3.1 znc-python3-1.7.2-bp150.2.3.1 znc-python3-debuginfo-1.7.2-bp150.2.3.1 znc-tcl-1.7.2-bp150.2.3.1 znc-tcl-debuginfo-1.7.2-bp150.2.3.1 - openSUSE Backports SLE-15 (noarch): znc-lang-1.7.2-bp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9917.html https://bugzilla.suse.com/1130360

1 0

openSUSE-RU-2019:1155-1: moderate: Recommended update for apache2
by maintenance＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1155-1 Rating: moderate References: #1125965 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - mod_httpd2 HTTP/2 stream 1 was not closed cleanly: PROTOCOL_ERROR (bsc#1125965) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1155=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-40.1 apache2-debuginfo-2.4.23-40.1 apache2-debugsource-2.4.23-40.1 apache2-devel-2.4.23-40.1 apache2-event-2.4.23-40.1 apache2-event-debuginfo-2.4.23-40.1 apache2-example-pages-2.4.23-40.1 apache2-prefork-2.4.23-40.1 apache2-prefork-debuginfo-2.4.23-40.1 apache2-utils-2.4.23-40.1 apache2-utils-debuginfo-2.4.23-40.1 apache2-worker-2.4.23-40.1 apache2-worker-debuginfo-2.4.23-40.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-40.1 References: https://bugzilla.suse.com/1125965

1 0

openSUSE-SU-2019:1158-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 05 Apr '19

05 Apr '19

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1158-1 Rating: moderate References: #1125401 #1128525 Cross-References: CVE-2019-8936 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for ntp fixes the following issues: Security issue fixed: - CVE-2019-8936: Fixed a null pointer exception which could allow an authenticated attcker to cause segmentation fault to ntpd (bsc#1128525). Other isses addressed: - Fixed an issue which caused openSSL mismatch (bsc#1125401) - Fixed several bugs in the BANCOMM reclock driver. - Fixed ntp_loopfilter.c snprintf compilation warnings. - Fixed spurious initgroups() error message. - Fixed STA_NANO struct timex units. - Fixed GPS week rollover in libparse. - Fixed incorrect poll interval in packet. - Added a missing check for ENABLE_CMAC. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1158=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ntp-4.2.8p13-31.9.1 ntp-debuginfo-4.2.8p13-31.9.1 ntp-debugsource-4.2.8p13-31.9.1 ntp-doc-4.2.8p13-31.9.1 References: https://www.suse.com/security/cve/CVE-2019-8936.html https://bugzilla.suse.com/1125401 https://bugzilla.suse.com/1128525

1 0