May 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:1310-1: moderate: Security update for libsoup
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for libsoup ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1310-1 Rating: moderate References: #1100097 Cross-References: CVE-2018-12910 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libsoup fixes the following issues: Security issue fixed: - CVE-2018-12910: Fix crash when handling empty hostnames (bsc#1100097). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1310=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libsoup-2_4-1-2.62.2-lp150.2.3.1 libsoup-2_4-1-debuginfo-2.62.2-lp150.2.3.1 libsoup-debugsource-2.62.2-lp150.2.3.1 libsoup-devel-2.62.2-lp150.2.3.1 typelib-1_0-Soup-2_4-2.62.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libsoup-2_4-1-32bit-2.62.2-lp150.2.3.1 libsoup-2_4-1-32bit-debuginfo-2.62.2-lp150.2.3.1 libsoup-devel-32bit-2.62.2-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): libsoup-lang-2.62.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12910.html https://bugzilla.suse.com/1100097

1 0

openSUSE-RU-2019:1317-1: moderate: Recommended update for NetworkManager
by maintenance＠opensuse.org 02 May '19

02 May '19

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1317-1 Rating: moderate References: #1103678 #1122262 #1128560 #1130355 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for NetworkManager fixes the following issues: - Make the enablement of n-m-wait-online.service follow n-m.service (bsc#1130355). - Use polkit action "org.freedesktop.NetworkManager.wifi.scan" instead of "org.freedesktop.NetworkManager.wifi-scan" to sync with upstream (bsc#1128560). - Fix the connectivity value of devices which was set to LIMITED when the connectivity check fails. Now if the connectivity is being set to LIMITED but the device state is DISCONNECTED, then the value is coerced to NONE. (bsc#1103678): - Fix the global connectivity value which wasn't updated when a device was removed. Which is a problem if the device being removed is the one providing the connectivity. (bsc#1103678) - Adding a new polkit action "org.freedesktop.NetworkManager.wifi-scan" so that distributions can add specific rule to allow Wi-Fi scans (bsc#1122262) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1317=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): NetworkManager-1.10.6-lp150.4.3.1 NetworkManager-debuginfo-1.10.6-lp150.4.3.1 NetworkManager-debugsource-1.10.6-lp150.4.3.1 NetworkManager-devel-1.10.6-lp150.4.3.1 libnm-glib-vpn1-1.10.6-lp150.4.3.1 libnm-glib-vpn1-debuginfo-1.10.6-lp150.4.3.1 libnm-glib4-1.10.6-lp150.4.3.1 libnm-glib4-debuginfo-1.10.6-lp150.4.3.1 libnm-util2-1.10.6-lp150.4.3.1 libnm-util2-debuginfo-1.10.6-lp150.4.3.1 libnm0-1.10.6-lp150.4.3.1 libnm0-debuginfo-1.10.6-lp150.4.3.1 rpmlint-mini-1.10-lp150.9.1 rpmlint-mini-debuginfo-1.10-lp150.9.1 rpmlint-mini-debugsource-1.10-lp150.9.1 typelib-1_0-NM-1_0-1.10.6-lp150.4.3.1 typelib-1_0-NMClient-1_0-1.10.6-lp150.4.3.1 typelib-1_0-NetworkManager-1_0-1.10.6-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): NetworkManager-branding-upstream-1.10.6-lp150.4.3.1 NetworkManager-lang-1.10.6-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): NetworkManager-devel-32bit-1.10.6-lp150.4.3.1 libnm-glib-vpn1-32bit-1.10.6-lp150.4.3.1 libnm-glib-vpn1-32bit-debuginfo-1.10.6-lp150.4.3.1 libnm-glib4-32bit-1.10.6-lp150.4.3.1 libnm-glib4-32bit-debuginfo-1.10.6-lp150.4.3.1 libnm-util2-32bit-1.10.6-lp150.4.3.1 libnm-util2-32bit-debuginfo-1.10.6-lp150.4.3.1 References: https://bugzilla.suse.com/1103678 https://bugzilla.suse.com/1122262 https://bugzilla.suse.com/1128560 https://bugzilla.suse.com/1130355

1 0

openSUSE-SU-2019:1313-1: moderate: Security update for ntfs-3g_ntfsprogs
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for ntfs-3g_ntfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1313-1 Rating: moderate References: #1130165 Cross-References: CVE-2019-9755 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ntfs-3g_ntfsprogs fixes the following issues: Security issues fixed: - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1313=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libntfs-3g-devel-2013.1.13-7.6.1 libntfs-3g84-2013.1.13-7.6.1 libntfs-3g84-debuginfo-2013.1.13-7.6.1 ntfs-3g-2013.1.13-7.6.1 ntfs-3g-debuginfo-2013.1.13-7.6.1 ntfs-3g_ntfsprogs-debugsource-2013.1.13-7.6.1 ntfsprogs-2013.1.13-7.6.1 ntfsprogs-debuginfo-2013.1.13-7.6.1 References: https://www.suse.com/security/cve/CVE-2019-9755.html https://bugzilla.suse.com/1130165

1 0

openSUSE-SU-2019:1314-1: moderate: Security update for ntfs-3g_ntfsprogs
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for ntfs-3g_ntfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1314-1 Rating: moderate References: #1130165 Cross-References: CVE-2019-9755 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ntfs-3g_ntfsprogs fixes the following issues: Security issues fixed: - CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation (bsc#1130165). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1314=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libntfs-3g-devel-2016.2.22-lp150.2.3.1 libntfs-3g87-2016.2.22-lp150.2.3.1 libntfs-3g87-debuginfo-2016.2.22-lp150.2.3.1 ntfs-3g-2016.2.22-lp150.2.3.1 ntfs-3g-debuginfo-2016.2.22-lp150.2.3.1 ntfs-3g_ntfsprogs-debuginfo-2016.2.22-lp150.2.3.1 ntfs-3g_ntfsprogs-debugsource-2016.2.22-lp150.2.3.1 ntfsprogs-2016.2.22-lp150.2.3.1 ntfsprogs-debuginfo-2016.2.22-lp150.2.3.1 ntfsprogs-extra-2016.2.22-lp150.2.3.1 ntfsprogs-extra-debuginfo-2016.2.22-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-9755.html https://bugzilla.suse.com/1130165

1 0

openSUSE-SU-2019:1312-1: important: Security update for dovecot23
by opensuse-security＠opensuse.org 02 May '19

02 May '19

openSUSE Security Update: Security update for dovecot23 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1312-1 Rating: important References: #1132501 Cross-References: CVE-2019-10691 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dovecot23 fixes the following issues: Security issue fixed: - CVE-2019-10691: Fixed a denial of service via reachable assertion when processing invalid UTF-8 characters (bsc#1132501). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1312=1 Package List: - openSUSE Leap 15.0 (x86_64): dovecot23-2.3.3-lp150.11.1 dovecot23-backend-mysql-2.3.3-lp150.11.1 dovecot23-backend-mysql-debuginfo-2.3.3-lp150.11.1 dovecot23-backend-pgsql-2.3.3-lp150.11.1 dovecot23-backend-pgsql-debuginfo-2.3.3-lp150.11.1 dovecot23-backend-sqlite-2.3.3-lp150.11.1 dovecot23-backend-sqlite-debuginfo-2.3.3-lp150.11.1 dovecot23-debuginfo-2.3.3-lp150.11.1 dovecot23-debugsource-2.3.3-lp150.11.1 dovecot23-devel-2.3.3-lp150.11.1 dovecot23-fts-2.3.3-lp150.11.1 dovecot23-fts-debuginfo-2.3.3-lp150.11.1 dovecot23-fts-lucene-2.3.3-lp150.11.1 dovecot23-fts-lucene-debuginfo-2.3.3-lp150.11.1 dovecot23-fts-solr-2.3.3-lp150.11.1 dovecot23-fts-solr-debuginfo-2.3.3-lp150.11.1 dovecot23-fts-squat-2.3.3-lp150.11.1 dovecot23-fts-squat-debuginfo-2.3.3-lp150.11.1 References: https://www.suse.com/security/cve/CVE-2019-10691.html https://bugzilla.suse.com/1132501

1 0

openSUSE-RU-2019:1308-1: moderate: Recommended update for mdadm
by maintenance＠opensuse.org 02 May '19

02 May '19

openSUSE Recommended Update: Recommended update for mdadm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1308-1 Rating: moderate References: #1127385 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mdadm provides the following fix: - assemble: Remove the protection when clustered raid do assemble. (bsc#1127385) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1308=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): mdadm-4.0-5.15.1 mdadm-debuginfo-4.0-5.15.1 mdadm-debugsource-4.0-5.15.1 References: https://bugzilla.suse.com/1127385

1 0

openSUSE-RU-2019:1309-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 02 May '19

02 May '19

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1309-1 Rating: moderate References: #1094934 #1107470 #709176 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-network fixes the following issues: - Fixes an error when writing remote configuration by cmdline (yast remote allow set=yes) (bsc#1094934) - Will now keep the original hostnames untouched in /etc/hosts when only the IP has changed (bsc#709176) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1309=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-network-4.0.46-lp150.2.13.1 References: https://bugzilla.suse.com/1094934 https://bugzilla.suse.com/1107470 https://bugzilla.suse.com/709176

1 0

openSUSE-RU-2019:1307-1: moderate: Recommended update for python-python-memcached
by maintenance＠opensuse.org 01 May '19

01 May '19

openSUSE Recommended Update: Recommended update for python-python-memcached ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1307-1 Rating: moderate References: #1131840 #1133090 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python-python-memcached fixes the following issues: python-python-memcached was updated to 1.59: * Various fixes for python 3.7 and 3.6 This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1307=1 Package List: - openSUSE Backports SLE-15 (noarch): python2-python-memcached-1.59-bp150.2.3.1 python3-python-memcached-1.59-bp150.2.3.1 References: https://bugzilla.suse.com/1131840 https://bugzilla.suse.com/1133090

1 0

openSUSE-RU-2019:1306-1: moderate: Recommended update for cgal
by maintenance＠opensuse.org 01 May '19

01 May '19

openSUSE Recommended Update: Recommended update for cgal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1306-1 Rating: moderate References: #1131859 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cgal fixes the following issues: Update to bugfix release 4.12.2: (boo#1131859) See: https://github.com/CGAL/cgal/milestone/37 and https://github.com/CGAL/cgal/milestone/33 This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1306=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): cgal-devel-4.12.2-bp150.3.3.1 libCGAL13-4.12.2-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): cgal-demo-examples-devel-4.12.2-bp150.3.3.1 cgal-doc-4.12.2-bp150.3.3.1 References: https://bugzilla.suse.com/1131859

1 0

openSUSE-RU-2019:1305-1: moderate: Recommended update for hwdata
by maintenance＠opensuse.org 01 May '19

01 May '19

openSUSE Recommended Update: Recommended update for hwdata ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1305-1 Rating: moderate References: #1121410 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for hwdata fixes the following issues: Update to version 0.320 (bsc#1121410): - Updated the pci, usb and vendor ids vendor and product databases. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1305=1 Package List: - openSUSE Leap 15.0 (noarch): hwdata-0.320-lp150.16.1 References: https://bugzilla.suse.com/1121410

1 0