May 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1328-1: moderate: Recommended update for putty
by maintenance＠opensuse.org 04 May '19

04 May '19

openSUSE Recommended Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1328-1 Rating: moderate References: #1133181 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for putty fixes the following issues: - Reenable Xresources / remove -DNOT_X_WINDOWS, the crash under Wayland appears gone. (boo#1133181) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1328=1 Package List: - openSUSE Leap 15.0 (x86_64): putty-0.71-lp150.12.1 putty-debuginfo-0.71-lp150.12.1 putty-debugsource-0.71-lp150.12.1 References: https://bugzilla.suse.com/1133181

1 0

openSUSE-SU-2019:1327-1: moderate: Security update for java-11-openjdk
by opensuse-security＠opensuse.org 04 May '19

04 May '19

openSUSE Security Update: Security update for java-11-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1327-1 Rating: moderate References: #1132728 #1132732 Cross-References: CVE-2019-2602 CVE-2019-2684 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for java-11-openjdk to version 11.0.3+7 fixes the following issues: Security issues fixed: - CVE-2019-2602: Fixed excessive use of CPU time in the BigDecimal implementation (bsc#1132728). - CVE-2019-2684: Fixed a flaw in the RMI registry implementation which could lead to selection of an incorrect skeleton class (bsc#1132732). Non-security issues fixed: - Multiple bug fixes and improvements. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1327=1 Package List: - openSUSE Leap 15.0 (noarch): java-11-openjdk-javadoc-11.0.3.0-lp150.2.16.1 - openSUSE Leap 15.0 (x86_64): java-11-openjdk-11.0.3.0-lp150.2.16.1 java-11-openjdk-accessibility-11.0.3.0-lp150.2.16.1 java-11-openjdk-accessibility-debuginfo-11.0.3.0-lp150.2.16.1 java-11-openjdk-debuginfo-11.0.3.0-lp150.2.16.1 java-11-openjdk-debugsource-11.0.3.0-lp150.2.16.1 java-11-openjdk-demo-11.0.3.0-lp150.2.16.1 java-11-openjdk-devel-11.0.3.0-lp150.2.16.1 java-11-openjdk-headless-11.0.3.0-lp150.2.16.1 java-11-openjdk-jmods-11.0.3.0-lp150.2.16.1 java-11-openjdk-src-11.0.3.0-lp150.2.16.1 References: https://www.suse.com/security/cve/CVE-2019-2602.html https://www.suse.com/security/cve/CVE-2019-2684.html https://bugzilla.suse.com/1132728 https://bugzilla.suse.com/1132732

1 0

openSUSE-RU-2019:1323-1: moderate: Recommended update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5
by maintenance＠opensuse.org 04 May '19

04 May '19

openSUSE Recommended Update: Recommended update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1323-1 Rating: moderate References: #1108019 #1130883 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for breeze, discover, drkonqi5, kcm_sddm, kinfocenter5, kscreen5, kscreenlocker, kwin5, libkscreen2, plasma-nm5, plasma-vault, plasma5-addons, plasma5-desktop, plasma5-sdk, plasma5-workspace, polkit-kde-agent-5, systemsettings5 fixes the following issues: KDE Plasma was updated to 5.12.8. For more details please see: * https://www.kde.org/announcements/plasma-5.12.8.php This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1323=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): breeze-5.12.8-bp150.3.3.1 breeze-debuginfo-5.12.8-bp150.3.3.1 breeze-debugsource-5.12.8-bp150.3.3.1 breeze4-style-5.12.8-bp150.3.3.1 breeze4-style-debuginfo-5.12.8-bp150.3.3.1 breeze4-style-debugsource-5.12.8-bp150.3.3.1 breeze5-decoration-5.12.8-bp150.3.3.1 breeze5-decoration-debuginfo-5.12.8-bp150.3.3.1 breeze5-style-5.12.8-bp150.3.3.1 breeze5-style-debuginfo-5.12.8-bp150.3.3.1 discover-5.12.8-bp150.7.1 discover-debuginfo-5.12.8-bp150.7.1 discover-debugsource-5.12.8-bp150.7.1 discover-plasmoid-5.12.8-bp150.7.1 discover-plasmoid-debuginfo-5.12.8-bp150.7.1 drkonqi5-5.12.8-bp150.3.3.1 drkonqi5-debuginfo-5.12.8-bp150.3.3.1 drkonqi5-debugsource-5.12.8-bp150.3.3.1 kauth-debugsource-5.45.0-bp150.11.1 kauth-devel-5.45.0-bp150.11.1 kcm_sddm-5.12.8-bp150.3.3.1 kcm_sddm-debuginfo-5.12.8-bp150.3.3.1 kcm_sddm-debugsource-5.12.8-bp150.3.3.1 kcoreaddons-5.45.0-bp150.3.8.1 kcoreaddons-debugsource-5.45.0-bp150.3.8.1 kcoreaddons-devel-5.45.0-bp150.3.8.1 kcoreaddons-devel-debuginfo-5.45.0-bp150.3.8.1 kinfocenter5-5.12.8-bp150.8.1 kinfocenter5-debuginfo-5.12.8-bp150.8.1 kinfocenter5-debugsource-5.12.8-bp150.8.1 kscreen5-5.12.8-bp150.7.1 kscreen5-debuginfo-5.12.8-bp150.7.1 kscreen5-debugsource-5.12.8-bp150.7.1 kscreenlocker-5.12.8-bp150.7.1 kscreenlocker-devel-5.12.8-bp150.7.1 kwin5-5.12.8-bp150.10.1 kwin5-debuginfo-5.12.8-bp150.10.1 kwin5-debugsource-5.12.8-bp150.10.1 kwin5-devel-5.12.8-bp150.10.1 libKF5Auth5-5.45.0-bp150.11.1 libKF5Auth5-debuginfo-5.45.0-bp150.11.1 libKF5CoreAddons5-5.45.0-bp150.3.8.1 libKF5CoreAddons5-debuginfo-5.45.0-bp150.3.8.1 libKF5Screen7-5.12.8-bp150.3.3.1 libKF5Screen7-debuginfo-5.12.8-bp150.3.3.1 libKScreenLocker5-5.12.8-bp150.7.1 libkscreen2-debugsource-5.12.8-bp150.3.3.1 libkscreen2-devel-5.12.8-bp150.3.3.1 libkscreen2-plugin-5.12.8-bp150.3.3.1 libkscreen2-plugin-debuginfo-5.12.8-bp150.3.3.1 plasma-vault-5.12.8-bp150.3.3.1 plasma-vault-backend-cryfs-5.12.8-bp150.3.3.1 plasma-vault-backend-encfs-5.12.8-bp150.3.3.1 plasma-vault-debuginfo-5.12.8-bp150.3.3.1 plasma-vault-debugsource-5.12.8-bp150.3.3.1 plasma5-sdk-5.12.8-bp150.3.3.1 plasma5-sdk-debuginfo-5.12.8-bp150.3.3.1 plasma5-sdk-debugsource-5.12.8-bp150.3.3.1 plasma5-workspace-5.12.8-bp150.7.1 plasma5-workspace-debuginfo-5.12.8-bp150.7.1 plasma5-workspace-debugsource-5.12.8-bp150.7.1 plasma5-workspace-devel-5.12.8-bp150.7.1 plasma5-workspace-libs-5.12.8-bp150.7.1 plasma5-workspace-libs-debuginfo-5.12.8-bp150.7.1 plasmaengineexplorer5-5.12.8-bp150.3.3.1 plasmaengineexplorer5-debuginfo-5.12.8-bp150.3.3.1 polkit-kde-agent-5-5.12.8-bp150.3.3.1 polkit-kde-agent-5-debuginfo-5.12.8-bp150.3.3.1 polkit-kde-agent-5-debugsource-5.12.8-bp150.3.3.1 systemsettings5-5.12.8-bp150.3.3.1 systemsettings5-debuginfo-5.12.8-bp150.3.3.1 systemsettings5-debugsource-5.12.8-bp150.3.3.1 systemsettings5-devel-5.12.8-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le x86_64): plasma5-desktop-5.12.8-bp150.8.1 plasma5-desktop-debuginfo-5.12.8-bp150.8.1 plasma5-desktop-debugsource-5.12.8-bp150.8.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kauth-devel-64bit-5.45.0-bp150.11.1 kcoreaddons-devel-64bit-5.45.0-bp150.3.8.1 kcoreaddons-devel-64bit-debuginfo-5.45.0-bp150.3.8.1 libKF5Auth5-64bit-5.45.0-bp150.11.1 libKF5Auth5-64bit-debuginfo-5.45.0-bp150.11.1 libKF5CoreAddons5-64bit-5.45.0-bp150.3.8.1 libKF5CoreAddons5-64bit-debuginfo-5.45.0-bp150.3.8.1 libKF5Screen7-64bit-5.12.8-bp150.3.3.1 libKF5Screen7-64bit-debuginfo-5.12.8-bp150.3.3.1 libkscreen2-devel-64bit-5.12.8-bp150.3.3.1 libkscreen2-plugin-64bit-5.12.8-bp150.3.3.1 libkscreen2-plugin-64bit-debuginfo-5.12.8-bp150.3.3.1 plasma5-workspace-libs-64bit-5.12.8-bp150.7.1 plasma5-workspace-libs-64bit-debuginfo-5.12.8-bp150.7.1 - openSUSE Backports SLE-15 (noarch): breeze5-cursors-5.12.8-bp150.3.3.1 breeze5-style-lang-5.12.8-bp150.3.3.1 breeze5-wallpapers-5.12.8-bp150.3.3.1 discover-lang-5.12.8-bp150.7.1 drkonqi5-lang-5.12.8-bp150.3.3.1 kcm_sddm-lang-5.12.8-bp150.3.3.1 kcoreaddons-lang-5.45.0-bp150.3.8.1 kinfocenter5-lang-5.12.8-bp150.8.1 kscreen5-lang-5.12.8-bp150.7.1 kscreenlocker-lang-5.12.8-bp150.7.1 kwin5-lang-5.12.8-bp150.10.1 libKF5Auth5-lang-5.45.0-bp150.11.1 plasma-nm5-lang-5.12.8-bp150.8.1 plasma-vault-lang-5.12.8-bp150.3.3.1 plasma5-addons-lang-5.12.8-bp150.7.1 plasma5-desktop-lang-5.12.8-bp150.8.1 plasma5-sdk-lang-5.12.8-bp150.3.3.1 plasma5-session-5.12.8-bp150.7.1 plasma5-session-wayland-5.12.8-bp150.7.1 plasma5-workspace-lang-5.12.8-bp150.7.1 polkit-kde-agent-5-lang-5.12.8-bp150.3.3.1 systemsettings5-lang-5.12.8-bp150.3.3.1 - openSUSE Backports SLE-15 (x86_64): plasma-nm5-5.12.8-bp150.8.1 plasma-nm5-debuginfo-5.12.8-bp150.8.1 plasma-nm5-debugsource-5.12.8-bp150.8.1 plasma-nm5-fortisslvpn-5.12.8-bp150.8.1 plasma-nm5-fortisslvpn-debuginfo-5.12.8-bp150.8.1 plasma-nm5-iodine-5.12.8-bp150.8.1 plasma-nm5-iodine-debuginfo-5.12.8-bp150.8.1 plasma-nm5-l2tp-5.12.8-bp150.8.1 plasma-nm5-l2tp-debuginfo-5.12.8-bp150.8.1 plasma-nm5-openconnect-5.12.8-bp150.8.1 plasma-nm5-openconnect-debuginfo-5.12.8-bp150.8.1 plasma-nm5-openswan-5.12.8-bp150.8.1 plasma-nm5-openswan-debuginfo-5.12.8-bp150.8.1 plasma-nm5-openvpn-5.12.8-bp150.8.1 plasma-nm5-openvpn-debuginfo-5.12.8-bp150.8.1 plasma-nm5-pptp-5.12.8-bp150.8.1 plasma-nm5-pptp-debuginfo-5.12.8-bp150.8.1 plasma-nm5-ssh-5.12.8-bp150.8.1 plasma-nm5-ssh-debuginfo-5.12.8-bp150.8.1 plasma-nm5-sstp-5.12.8-bp150.8.1 plasma-nm5-sstp-debuginfo-5.12.8-bp150.8.1 plasma-nm5-strongswan-5.12.8-bp150.8.1 plasma-nm5-strongswan-debuginfo-5.12.8-bp150.8.1 plasma-nm5-vpnc-5.12.8-bp150.8.1 plasma-nm5-vpnc-debuginfo-5.12.8-bp150.8.1 plasma5-addons-5.12.8-bp150.7.1 plasma5-addons-debuginfo-5.12.8-bp150.7.1 plasma5-addons-debugsource-5.12.8-bp150.7.1 References: https://bugzilla.suse.com/1108019 https://bugzilla.suse.com/1130883

1 0

openSUSE-SU-2019:1320-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 03 May '19

03 May '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1320-1 Rating: moderate References: #1106989 #1106996 #1107609 #1120381 #1122033 #1124365 #1124366 #1124368 #1128649 #1130330 #1131317 #1132053 #1132054 #1132060 Cross-References: CVE-2018-16412 CVE-2018-16413 CVE-2018-16644 CVE-2018-20467 CVE-2019-10650 CVE-2019-11007 CVE-2019-11008 CVE-2019-11009 CVE-2019-7175 CVE-2019-7395 CVE-2019-7397 CVE-2019-7398 CVE-2019-9956 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has one errata is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2019-9956: Fixed a stack-based buffer overflow in PopHexPixel() (bsc#1130330). - CVE-2019-10650: Fixed a heap-based buffer over-read in WriteTIFFImage() (bsc#1131317). - CVE-2019-7175: Fixed multiple memory leaks in DecodeImage function (bsc#1128649). - CVE-2018-20467: Fixed infinite loop in coders/bmp.c (bsc#1120381). - CVE-2019-7398: Fixed a memory leak in the function WriteDIBImage (bsc#1124365). - CVE-2019-7397: Fixed a memory leak in the function WritePDFImage (bsc#1124366). - CVE-2019-7395: Fixed a memory leak in the function WritePSDChannel (bsc#1124368). - CVE-2018-16413: Fixed a heap-based buffer over-read in PushShortPixel() (bsc#1106989). - CVE-2018-16412: Fixed a heap-based buffer over-read in ParseImageResourceBlocks() (bsc#1106996). - CVE-2018-16644: Fixed a regression in dcm coder (bsc#1107609). - CVE-2019-11007: Fixed a heap-based buffer overflow in ReadMNGImage() (bsc#1132060). - CVE-2019-11008: Fixed a heap-based buffer overflow in WriteXWDImage() (bsc#1132054). - CVE-2019-11009: Fixed a heap-based buffer over-read in ReadXWDImage() (bsc#1132053). - Added extra -config- packages with Postscript/EPS/PDF readers still enabled. Removing the PS decoders is used to harden ImageMagick against security issues within ghostscript. Enabling them might impact security. (bsc#1122033) These are two packages that can be selected: - ImageMagick-config-6-SUSE: This has the PS decoders disabled. - ImageMagick-config-6-upstream: This has the PS decoders enabled. Depending on your local needs install either one of them. The default is the -SUSE configuration. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1320=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ImageMagick-6.8.8.1-82.1 ImageMagick-config-6-SUSE-6.8.8.1-82.1 ImageMagick-config-6-upstream-6.8.8.1-82.1 ImageMagick-debuginfo-6.8.8.1-82.1 ImageMagick-debugsource-6.8.8.1-82.1 ImageMagick-devel-6.8.8.1-82.1 ImageMagick-extra-6.8.8.1-82.1 ImageMagick-extra-debuginfo-6.8.8.1-82.1 libMagick++-6_Q16-3-6.8.8.1-82.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-82.1 libMagick++-devel-6.8.8.1-82.1 libMagickCore-6_Q16-1-6.8.8.1-82.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-82.1 libMagickWand-6_Q16-1-6.8.8.1-82.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-82.1 perl-PerlMagick-6.8.8.1-82.1 perl-PerlMagick-debuginfo-6.8.8.1-82.1 - openSUSE Leap 42.3 (noarch): ImageMagick-doc-6.8.8.1-82.1 - openSUSE Leap 42.3 (x86_64): ImageMagick-devel-32bit-6.8.8.1-82.1 libMagick++-6_Q16-3-32bit-6.8.8.1-82.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-82.1 libMagick++-devel-32bit-6.8.8.1-82.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-82.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-82.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-82.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-82.1 References: https://www.suse.com/security/cve/CVE-2018-16412.html https://www.suse.com/security/cve/CVE-2018-16413.html https://www.suse.com/security/cve/CVE-2018-16644.html https://www.suse.com/security/cve/CVE-2018-20467.html https://www.suse.com/security/cve/CVE-2019-10650.html https://www.suse.com/security/cve/CVE-2019-11007.html https://www.suse.com/security/cve/CVE-2019-11008.html https://www.suse.com/security/cve/CVE-2019-11009.html https://www.suse.com/security/cve/CVE-2019-7175.html https://www.suse.com/security/cve/CVE-2019-7395.html https://www.suse.com/security/cve/CVE-2019-7397.html https://www.suse.com/security/cve/CVE-2019-7398.html https://www.suse.com/security/cve/CVE-2019-9956.html https://bugzilla.suse.com/1106989 https://bugzilla.suse.com/1106996 https://bugzilla.suse.com/1107609 https://bugzilla.suse.com/1120381 https://bugzilla.suse.com/1122033 https://bugzilla.suse.com/1124365 https://bugzilla.suse.com/1124366 https://bugzilla.suse.com/1124368 https://bugzilla.suse.com/1128649 https://bugzilla.suse.com/1130330 https://bugzilla.suse.com/1131317 https://bugzilla.suse.com/1132053 https://bugzilla.suse.com/1132054 https://bugzilla.suse.com/1132060

1 0

openSUSE-OU-2019:1322-1: Recommended update for python-logreduce
by maintenance＠opensuse.org 03 May '19

03 May '19

openSUSE Optional Update: Recommended update for python-logreduce ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:1322-1 Rating: low References: #1131198 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for python-logreduce fixes the following issues: Initial packaging for Leap 15.0 (boo#1131198) * version 0.4.0 Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1322=1 Package List: - openSUSE Leap 15.0 (noarch): python3-logreduce-0.4.0-lp150.2.1 References: https://bugzilla.suse.com/1131198

1 0

openSUSE-RU-2019:1321-1: moderate: Recommended update for SUSE Manager Client Tools
by maintenance＠opensuse.org 03 May '19

03 May '19

openSUSE Recommended Update: Recommended update for SUSE Manager Client Tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1321-1 Rating: moderate References: #1109316 #1111348 #1118492 #1120242 #1125744 #1127488 #1129300 #1130658 #1131677 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update fixes the following issues: cobbler: - Fixes case where distribution detection returns None (bsc#1130658) - SUSE texmode fix (bsc#1109316) kiwi-desc-saltboot: - Add more options to generate Salt ID (bsc#1111348) spacecmd: - Fix system_delete with SSM (bsc#1125744) spacewalk-backend: - Fix linking of packages in reposync (bsc#1131677) - Fix: handle non-standard filenames for comps.xml (bsc#1120242) - Mgr-sign-metadata can optionally clear-sign metadata files - Fix crash when importing new channel families on 'mgr-inter-sync' (bsc#1129300) - Avoid DB constraint violations caused by extended UTF8 characters on the RPM headers - Prevent mgr-inter-sync crash because 'SuseProductRepository' not found (bsc#1129300) - Make sure the package download url does not have '//' (bsc#1127488) - Fix typo in syncing product extensions (bsc#1118492) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1321=1 Package List: - openSUSE Leap 42.3 (noarch): cobbler-2.6.6-26.1 cobbler-tests-2.6.6-26.1 cobbler-web-2.6.6-26.1 koan-2.6.6-26.1 References: https://bugzilla.suse.com/1109316 https://bugzilla.suse.com/1111348 https://bugzilla.suse.com/1118492 https://bugzilla.suse.com/1120242 https://bugzilla.suse.com/1125744 https://bugzilla.suse.com/1127488 https://bugzilla.suse.com/1129300 https://bugzilla.suse.com/1130658 https://bugzilla.suse.com/1131677

1 0

openSUSE-RU-2019:1318-1: moderate: Recommended update for darktable
by maintenance＠opensuse.org 03 May '19

03 May '19

openSUSE Recommended Update: Recommended update for darktable ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1318-1 Rating: moderate References: Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for darktable fixes the following issues: Darktable was updated to 2.6.2: - New Features - Update colorbalance french translation - Bugfixes - Camera support, compared to 2.6.1 - Base Support - DSC-RX100M6 - Phase One P30 (fixed) - Olympus OM-D E-M10 (enhanced) - Nikon D7500 (enhanced) - White Balance Presets - Nikon D500 - Olympus E-PL8 - Noise Profiles - Sony SLT-A35 - Nikon Z6 - updated translations: Catalan, Czech, Dutch, Finnish, French, German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish - Updated pdf manuals from 2.6.1 tag: comes in english, german and italian - actually install all pdf documentation Version update to 2.6.1: - New Features - export module to piwigo - color balance enhancements - color contrast enhancements - filmic enhancements (better auto-tuner) - add contextual help for filmic module - middle-click can be used to open the presets menu (this is consistent with the fact that middle-click can be used to create a new instance from a preset) - again, better CSS customization for lighttable, filmstrip and duplicates module - presets can now be imported/exported - all zoom levels can now be reached with a ctrl-scroll - the slideshow view will adjust automatically when darktable window is resized - add support for tiff CIELAB/ICCLAB 8/16 bits - add hierarchical view for styles (separated with |) - forms opacity is displayed in hint messages - add a color picker in the watermark module - Bugfixes - Camera support, compared to 2.6.0 - Base Support - DSC-RX100M6 - Phase One P30 (fixed) - Olympus OM-D E-M10 (enhanced) - Nikon D7500 (enhanced) - White Balance Presets - Nikon D500 - Olympus E-PL8 - Noise Profiles - Sony SLT-A35 - Nikon Z6 - Translations - Catalan Czech, Dutch, Finnish, French, German, Norwegian bokmål, Polish, Russian, Slovenian, Spanish Noise tools need ghostscript for pdf handling Darktable updated to 2.6.0: - The Big Ones - new module retouch allowing changes based on image frequency layers - new module filmic which can replace the base curve and shadows and highlights - new module to handle duplicates in the darkroom with possibility to add a title, create standard or virgin duplicate, delete duplicate and quickly compare with a duplicate - new logarithm controls for the tone-curve - new mode for the unbreak profile module - add mask preview to adjust size, hardness before placing them - make it possible to change the cropped area in the perspective correction module - the mask blur has been complemented with a guided-filter to fine tune it (this works on RGB and Lab color space). - color balance module has two new modes based on ProPhotoRGB and HSL - Experimental support for PPC64le architecture (OpenCL support needs to be disabled, `-DUSE_OPENCL=OFF`) - New Features And Changes - search from the map view is now fixed - visual rework of the lighttable (color label, image kind, local copy) - an option make it possible to display some image information directly on the thumb - add optional scrollbars on lighttable, or lighttable and darkroom - allow each masks of the clone module to have the opacity adjusted - lightroom import module supports the creator, rights, title, description and publisher information. - enhance TurboPrint support by displaying the dialogue with all possible options (print cancellation will be fixed in TurboPrint 2.47) - new sort filter based on the image's aspect - new sort filter based on the image's shutter speed - new sort filter based on the image's group - new sort filter based on a personalized sorting order (drag&drop on the lighttable view) - collection based on the local copy status - group image number displayed on the collection module - new zoom level at 50%; 400%, 800% and 1600% - better support for monochrome RAW - add contextual help pointing to the darktable's manual - better copy/paste support for multiple instances - add support for renaming the module instances - add frequency based adjustment for the RAW denoise module - add frequency based adjustment for the denoise profile module - all widgets should be themable via CSS now - add support for configuring the modules layout - different way to select hierarchical tags in the collection module (only the actual parent tag, all children or the parent and children) - better handling of grouped images by allowing setting stars, color label for the whole group. - make it possible to apply a preset to a new module instance using the middle click - new script to migrate collection from Capture One Pro - Bug fixes - RawSpeed changes - GoPro '.GPR' raws are now supported via new, fast 'VC-5' parallel decompressor - Panasonic's new raw compression ('.RW2', GH5s, G9 cameras) is now supported via new fast, parallel 'Panasonic V5' decompressor - Panasonic's old (also '.RW2') raw decompressor got rewritten, re-parallelized - Phase One ('.IIQ') decompressor got parallelized - Nikon NEF 'lossy after split' raw support was recovered - Phase One ('.IIQ') Quadrant Correction is now supported - Olympus High-Res (uncompressed) raw support - Lot's and lot's and lot's of maintenance, sanitization, cleanups, small rewrites/refactoring. - NOTE: Canon '.CR3' raws are *NOT* supported as of yet. - Camera support, compared to 2.4.0 - Base Support - Canon EOS 1500D - Canon EOS 2000D - Canon EOS Rebel T7 - Canon EOS 3000D - Canon EOS 4000D - Canon EOS Rebel T100 - Canon EOS 5D Mark IV (sRaw1, sRaw2) - Canon EOS 5DS (sRaw1, sRaw2) - Canon EOS 5DS R (sRaw1, sRaw2) - Canon PowerShot G1 X Mark III - Fujifilm X-A5 - Fujifilm X-H1 (compressed) - Fujifilm X-T100 - Fujifilm X-T3 (compressed) - GoPro FUSION (dng) - GoPro HERO5 Black (dng) - GoPro HERO6 Black (dng) - GoPro HERO7 Black (dng) - Hasselblad CFV-50 - Hasselblad H5D-40 - Hasselblad H5D-50c - Kodak DCS Pro 14nx - Kodak DCS520C - Kodak DCS760C - Kodak EOS DCS 3 - Nikon COOLPIX P1000 (12bit-uncompressed) - Nikon D2Xs (12bit-compressed, 12bit-uncompressed) - Nikon D3500 (12bit-compressed) - Nikon Z 6 (except uncompressed raws) - Nikon Z 7 (except 14-bit uncompressed raw) - Olympus E-PL8 - Olympus E-PL9 - Olympus SH-2 - Panasonic DC-FZ80 (4:3) - Panasonic DC-G9 (4:3) - Panasonic DC-GF9 (4:3) - Panasonic DC-GX800 (4:3) - Panasonic DC-GX850 (4:3) - Panasonic DC-GH5S (4:3, 3:2, 16:9, 1:1) - Panasonic DC-GX9 (4:3) - Panasonic DC-LX100M2 (4:3, 1:1, 16:9, 3:2) - Panasonic DC-TZ200 (3:2) - Panasonic DC-TZ202 (3:2) - Panasonic DMC-FZ2000 (3:2) - Panasonic DMC-FZ2500 (3:2) - Panasonic DMC-FZ35 (3:2, 16:9) - Panasonic DMC-FZ38 (3:2, 16:9) - Panasonic DMC-GX7MK2 (4:3) - Panasonic DMC-ZS100 (3:2) - Paralenz Dive Camera (chdk) - Pentax 645Z - Pentax K-1 Mark II - Pentax KP - Phase One P65+ - Sjcam SJ6 LEGEND (chdk-b, chdk-c) - Sony DSC-HX99 - Sony DSC-RX0 - Sony DSC-RX100M5A - Sony DSC-RX10M4 - Sony DSC-RX1RM2 - Sony ILCE-7M3 - White Balance Presets - Canon EOS M100 - Fujifilm X-T3 - Leaf Credo 40 - Nikon D3400 - Nikon D5600 - Nikon D7500 - Nikon D850 - Nikon Z 6 - Olympus E-M10 Mark III - Olympus E-M1MarkII - Panasonic DC-G9 - Panasonic DC-GX9 - Panasonic DMC-FZ300 - Sony DSC-RX0 - Sony DSC-RX100M5 - Sony DSC-RX100M5A - Sony DSC-RX10M3 - Sony DSC-RX10M4 - Sony DSC-RX1RM2 - Sony ILCE-6500 - Sony ILCE-7M3 - Sony ILCE-7RM3 - Noise Profiles - Canon EOS 200D - Canon EOS Kiss X9 - Canon EOS Rebel SL2 - Canon EOS 750D - Canon EOS Kiss X8i - Canon EOS Rebel T6i - Canon EOS 760D - Canon EOS 8000D - Canon EOS Rebel T6s - Canon EOS 77D - Canon EOS 9000D - Canon EOS 800D - Canon EOS Kiss X9i - Canon EOS Rebel T7i - Canon EOS M100 - Canon EOS M6 - Canon PowerShot G1 X Mark II - Canon PowerShot G1 X Mark III - Canon PowerShot G9 X - Fujifilm X-A5 - Fujifilm X-E3 - Fujifilm X-T3 - Fujifilm X100F - Nikon 1 AW1 - Nikon 1 J3 - Nikon COOLPIX B700 - Nikon D5600 - Nikon D7500 - Nikon D850 - Olympus E-M10 Mark III - Olympus TG-5 - Panasonic DC-G9 - Panasonic DC-GX9 - Panasonic DMC-FZ35 - Panasonic DMC-FZ38 - Panasonic DMC-GF6 - Panasonic DMC-LX10 - Panasonic DMC-LX15 - Panasonic DMC-LX9 - Panasonic DMC-TZ70 - Panasonic DMC-TZ71 - Panasonic DMC-ZS50 - Pentax K-01 - Pentax KP - Samsung NX1 - Sony DSC-RX100M4 - Sony DSC-RX10M3 - Sony ILCE-7M3 - Translations - Afrikaans, Albanian, Chinese, Czech, Dutch, Finnish, French, Galician, German, Hebrew, Hungarian, Italian, Japanese, Nepal, Norwegian Bokmål, Polish, Portuguese, Romanian, Russian, Slovenian, Thai Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1318=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1318=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1318=1 Package List: - openSUSE Leap 42.3 (noarch): darktable-doc-2.6.2-2.3.2 - openSUSE Leap 42.3 (x86_64): darktable-2.6.2-2.3.2 darktable-debuginfo-2.6.2-2.3.2 darktable-debugsource-2.6.2-2.3.2 darktable-tools-basecurve-2.6.2-2.3.2 darktable-tools-basecurve-debuginfo-2.6.2-2.3.2 darktable-tools-noise-2.6.2-2.3.2 darktable-tools-noise-debuginfo-2.6.2-2.3.2 - openSUSE Leap 15.0 (noarch): darktable-doc-2.6.2-lp150.3.3.2 - openSUSE Leap 15.0 (x86_64): darktable-2.6.2-lp150.3.3.2 darktable-debuginfo-2.6.2-lp150.3.3.2 darktable-debugsource-2.6.2-lp150.3.3.2 darktable-tools-basecurve-2.6.2-lp150.3.3.2 darktable-tools-basecurve-debuginfo-2.6.2-lp150.3.3.2 darktable-tools-noise-2.6.2-lp150.3.3.2 darktable-tools-noise-debuginfo-2.6.2-lp150.3.3.2 - openSUSE Backports SLE-15 (noarch): darktable-doc-2.6.2-bp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): darktable-2.6.2-bp150.2.3.1 darktable-tools-basecurve-2.6.2-bp150.2.3.1 darktable-tools-noise-2.6.2-bp150.2.3.1 References:

1 0

openSUSE-RU-2019:1319-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 03 May '19

03 May '19

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1319-1 Rating: moderate References: #1040054 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - The 'Apply' button is now disabled until a change has been made (bsc#1040054) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1319=1 Package List: - openSUSE Leap 42.3 (noarch): gnome-control-center-lang-3.20.1-18.6.1 - openSUSE Leap 42.3 (x86_64): gnome-control-center-3.20.1-18.6.1 gnome-control-center-color-3.20.1-18.6.1 gnome-control-center-debuginfo-3.20.1-18.6.1 gnome-control-center-debugsource-3.20.1-18.6.1 gnome-control-center-devel-3.20.1-18.6.1 gnome-control-center-goa-3.20.1-18.6.1 gnome-control-center-user-faces-3.20.1-18.6.1 References: https://bugzilla.suse.com/1040054

1 0

openSUSE-SU-2019:1316-1: moderate: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1316-1 Rating: moderate References: #1126768 Cross-References: CVE-2019-8375 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for webkit2gtk3 fixes the following issues: Security issue fixed: - CVE-2019-8375: Fixed an issue in UIProcess subsystem which could allow the script dialog size to exceed the web view size leading to Buffer Overflow or other unspecified impact (bsc#1126768). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1316=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.24.0-24.1 libjavascriptcoregtk-4_0-18-debuginfo-2.24.0-24.1 libwebkit2gtk-4_0-37-2.24.0-24.1 libwebkit2gtk-4_0-37-debuginfo-2.24.0-24.1 typelib-1_0-JavaScriptCore-4_0-2.24.0-24.1 typelib-1_0-WebKit2-4_0-2.24.0-24.1 typelib-1_0-WebKit2WebExtension-4_0-2.24.0-24.1 webkit-jsc-4-2.24.0-24.1 webkit-jsc-4-debuginfo-2.24.0-24.1 webkit2gtk-4_0-injected-bundles-2.24.0-24.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.24.0-24.1 webkit2gtk3-debugsource-2.24.0-24.1 webkit2gtk3-devel-2.24.0-24.1 webkit2gtk3-minibrowser-2.24.0-24.1 webkit2gtk3-minibrowser-debuginfo-2.24.0-24.1 webkit2gtk3-plugin-process-gtk2-2.24.0-24.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.24.0-24.1 - openSUSE Leap 42.3 (noarch): libwebkit2gtk3-lang-2.24.0-24.1 - openSUSE Leap 42.3 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.24.0-24.1 libjavascriptcoregtk-4_0-18-debuginfo-32bit-2.24.0-24.1 libwebkit2gtk-4_0-37-32bit-2.24.0-24.1 libwebkit2gtk-4_0-37-debuginfo-32bit-2.24.0-24.1 References: https://www.suse.com/security/cve/CVE-2019-8375.html https://bugzilla.suse.com/1126768

1 0

openSUSE-SU-2019:1315-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1315-1 Rating: moderate References: #1010783 #1117505 #1117511 Cross-References: CVE-2016-9396 CVE-2018-19539 CVE-2018-19542 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19542: Fixed a denial of service in jp2_decode (bsc#1117505). - CVE-2018-19539: Fixed a denial of service in jas_image_readcmpt (bsc#1117511). - CVE-2016-9396: Fixed a denial of service in jpc_cox_getcompparms (bsc#1010783). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1315=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): jasper-2.0.14-lp150.2.3.1 jasper-debuginfo-2.0.14-lp150.2.3.1 jasper-debugsource-2.0.14-lp150.2.3.1 libjasper-devel-2.0.14-lp150.2.3.1 libjasper4-2.0.14-lp150.2.3.1 libjasper4-debuginfo-2.0.14-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libjasper4-32bit-2.0.14-lp150.2.3.1 libjasper4-32bit-debuginfo-2.0.14-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2016-9396.html https://www.suse.com/security/cve/CVE-2018-19539.html https://www.suse.com/security/cve/CVE-2018-19542.html https://bugzilla.suse.com/1010783 https://bugzilla.suse.com/1117505 https://bugzilla.suse.com/1117511

1 0