May 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1472-1: Recommended update for rsyslog
by maintenance＠opensuse.org 29 May '19

29 May '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1472-1 Rating: low References: #1126233 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - Set default permission for all log files (bsc#1126233) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1472=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rsyslog-8.24.0-2.13.1 rsyslog-debuginfo-8.24.0-2.13.1 rsyslog-debugsource-8.24.0-2.13.1 rsyslog-diag-tools-8.24.0-2.13.1 rsyslog-diag-tools-debuginfo-8.24.0-2.13.1 rsyslog-doc-8.24.0-2.13.1 rsyslog-module-dbi-8.24.0-2.13.1 rsyslog-module-dbi-debuginfo-8.24.0-2.13.1 rsyslog-module-elasticsearch-8.24.0-2.13.1 rsyslog-module-elasticsearch-debuginfo-8.24.0-2.13.1 rsyslog-module-gcrypt-8.24.0-2.13.1 rsyslog-module-gcrypt-debuginfo-8.24.0-2.13.1 rsyslog-module-gssapi-8.24.0-2.13.1 rsyslog-module-gssapi-debuginfo-8.24.0-2.13.1 rsyslog-module-gtls-8.24.0-2.13.1 rsyslog-module-gtls-debuginfo-8.24.0-2.13.1 rsyslog-module-guardtime-8.24.0-2.13.1 rsyslog-module-guardtime-debuginfo-8.24.0-2.13.1 rsyslog-module-mmnormalize-8.24.0-2.13.1 rsyslog-module-mmnormalize-debuginfo-8.24.0-2.13.1 rsyslog-module-mysql-8.24.0-2.13.1 rsyslog-module-mysql-debuginfo-8.24.0-2.13.1 rsyslog-module-omamqp1-8.24.0-2.13.1 rsyslog-module-omamqp1-debuginfo-8.24.0-2.13.1 rsyslog-module-omhttpfs-8.24.0-2.13.1 rsyslog-module-omhttpfs-debuginfo-8.24.0-2.13.1 rsyslog-module-omtcl-8.24.0-2.13.1 rsyslog-module-omtcl-debuginfo-8.24.0-2.13.1 rsyslog-module-pgsql-8.24.0-2.13.1 rsyslog-module-pgsql-debuginfo-8.24.0-2.13.1 rsyslog-module-relp-8.24.0-2.13.1 rsyslog-module-relp-debuginfo-8.24.0-2.13.1 rsyslog-module-snmp-8.24.0-2.13.1 rsyslog-module-snmp-debuginfo-8.24.0-2.13.1 rsyslog-module-udpspoof-8.24.0-2.13.1 rsyslog-module-udpspoof-debuginfo-8.24.0-2.13.1 References: https://bugzilla.suse.com/1126233

1 0

openSUSE-RU-2019:1470-1: moderate: Recommended update for aaa_base
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1470-1 Rating: moderate References: #1096191 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aaa_base fixes the following issue: * Shell detection in /etc/profile and /etc/bash.bashrc was broken within AppArmor-confined containers (bsc#1096191) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1470=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1470=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): aaa_base-84.87+git20180409.04c9dae-lp151.5.3.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-lp151.5.3.1 aaa_base-debugsource-84.87+git20180409.04c9dae-lp151.5.3.1 aaa_base-extras-84.87+git20180409.04c9dae-lp151.5.3.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-lp151.5.3.1 aaa_base-wsl-84.87+git20180409.04c9dae-lp151.5.3.1 - openSUSE Leap 15.0 (i586 x86_64): aaa_base-84.87+git20180409.04c9dae-lp150.11.1 aaa_base-debuginfo-84.87+git20180409.04c9dae-lp150.11.1 aaa_base-debugsource-84.87+git20180409.04c9dae-lp150.11.1 aaa_base-extras-84.87+git20180409.04c9dae-lp150.11.1 aaa_base-malloccheck-84.87+git20180409.04c9dae-lp150.11.1 aaa_base-wsl-84.87+git20180409.04c9dae-lp150.11.1 References: https://bugzilla.suse.com/1096191

1 0

openSUSE-RU-2019:1461-1: moderate: Recommended update for logrotate
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for logrotate ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1461-1 Rating: moderate References: #1131477 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for logrotate fixes the following issue: - Trigger the rotation of weekly events more predictably [bsc#1131477] Introduce an optional argument for the 'weekly' directive to trigger the rotation on a selected day of the week. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1461=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): logrotate-3.11.0-21.1 logrotate-debuginfo-3.11.0-21.1 logrotate-debugsource-3.11.0-21.1 References: https://bugzilla.suse.com/1131477

1 0

openSUSE-RU-2019:1463-1: moderate: Recommended update for libguestfs
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for libguestfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1463-1 Rating: moderate References: #1131342 #1132790 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libguestfs fixes the following issues: - Fixes an issue where the --uninstall option of virt-customize didn't work as expected (bsc#1131342) - Fixes an issue with virt-customize in SLES and openSUSE guests (bsc#1132790) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1463=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1463=1 Package List: - openSUSE Leap 15.1 (x86_64): guestfs-data-1.38.0-lp151.4.3.1 guestfs-tools-1.38.0-lp151.4.3.1 guestfs-tools-debuginfo-1.38.0-lp151.4.3.1 guestfsd-1.38.0-lp151.4.3.1 guestfsd-debuginfo-1.38.0-lp151.4.3.1 libguestfs-debugsource-1.38.0-lp151.4.3.1 libguestfs-devel-1.38.0-lp151.4.3.1 libguestfs-test-1.38.0-lp151.4.3.1 libguestfs0-1.38.0-lp151.4.3.1 libguestfs0-debuginfo-1.38.0-lp151.4.3.1 lua-libguestfs-1.38.0-lp151.4.3.1 lua-libguestfs-debuginfo-1.38.0-lp151.4.3.1 ocaml-libguestfs-1.38.0-lp151.4.3.1 ocaml-libguestfs-debuginfo-1.38.0-lp151.4.3.1 ocaml-libguestfs-devel-1.38.0-lp151.4.3.1 perl-Sys-Guestfs-1.38.0-lp151.4.3.1 perl-Sys-Guestfs-debuginfo-1.38.0-lp151.4.3.1 python2-libguestfs-1.38.0-lp151.4.3.1 python2-libguestfs-debuginfo-1.38.0-lp151.4.3.1 python3-libguestfs-1.38.0-lp151.4.3.1 python3-libguestfs-debuginfo-1.38.0-lp151.4.3.1 rubygem-libguestfs-1.38.0-lp151.4.3.1 rubygem-libguestfs-debuginfo-1.38.0-lp151.4.3.1 virt-v2v-1.38.0-lp151.4.3.1 virt-v2v-debuginfo-1.38.0-lp151.4.3.1 - openSUSE Leap 15.0 (x86_64): guestfs-data-1.38.0-lp150.3.3.1 guestfs-tools-1.38.0-lp150.3.3.1 guestfs-tools-debuginfo-1.38.0-lp150.3.3.1 guestfsd-1.38.0-lp150.3.3.1 guestfsd-debuginfo-1.38.0-lp150.3.3.1 libguestfs-debugsource-1.38.0-lp150.3.3.1 libguestfs-devel-1.38.0-lp150.3.3.1 libguestfs-test-1.38.0-lp150.3.3.1 libguestfs0-1.38.0-lp150.3.3.1 libguestfs0-debuginfo-1.38.0-lp150.3.3.1 lua-libguestfs-1.38.0-lp150.3.3.1 lua-libguestfs-debuginfo-1.38.0-lp150.3.3.1 ocaml-libguestfs-1.38.0-lp150.3.3.1 ocaml-libguestfs-debuginfo-1.38.0-lp150.3.3.1 ocaml-libguestfs-devel-1.38.0-lp150.3.3.1 perl-Sys-Guestfs-1.38.0-lp150.3.3.1 perl-Sys-Guestfs-debuginfo-1.38.0-lp150.3.3.1 python2-libguestfs-1.38.0-lp150.3.3.1 python2-libguestfs-debuginfo-1.38.0-lp150.3.3.1 python3-libguestfs-1.38.0-lp150.3.3.1 python3-libguestfs-debuginfo-1.38.0-lp150.3.3.1 rubygem-libguestfs-1.38.0-lp150.3.3.1 rubygem-libguestfs-debuginfo-1.38.0-lp150.3.3.1 virt-v2v-1.38.0-lp150.3.3.1 virt-v2v-debuginfo-1.38.0-lp150.3.3.1 References: https://bugzilla.suse.com/1131342 https://bugzilla.suse.com/1132790

1 0

openSUSE-SU-2019:1462-1: moderate: Security update for nmap
by opensuse-security＠opensuse.org 28 May '19

28 May '19

openSUSE Security Update: Security update for nmap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1462-1 Rating: moderate References: #1104139 #1133512 Cross-References: CVE-2018-15173 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for nmap fixes the following issues: Security issue fixed: - CVE-2018-15173: Fixed a remote denial of service attack via a crafted TCP-based service (bsc#1104139). Non-security issue fixed: - Add missing runtime dependency python-xml which prevented zenmap from starting (bsc#1133512). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1462=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1462=1 Package List: - openSUSE Leap 15.1 (x86_64): ncat-7.70-lp151.3.3.1 ncat-debuginfo-7.70-lp151.3.3.1 ndiff-7.70-lp151.3.3.1 nmap-7.70-lp151.3.3.1 nmap-debuginfo-7.70-lp151.3.3.1 nmap-debugsource-7.70-lp151.3.3.1 nping-7.70-lp151.3.3.1 nping-debuginfo-7.70-lp151.3.3.1 zenmap-7.70-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): ncat-7.70-lp150.2.3.1 ncat-debuginfo-7.70-lp150.2.3.1 ndiff-7.70-lp150.2.3.1 nmap-7.70-lp150.2.3.1 nmap-debuginfo-7.70-lp150.2.3.1 nmap-debugsource-7.70-lp150.2.3.1 nping-7.70-lp150.2.3.1 nping-debuginfo-7.70-lp150.2.3.1 zenmap-7.70-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-15173.html https://bugzilla.suse.com/1104139 https://bugzilla.suse.com/1133512

1 0

openSUSE-RU-2019:1466-1: moderate: Recommended update for pam
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for pam ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1466-1 Rating: moderate References: #1135795 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pam fixes the following issues: - Removed all limits from modules/pam_limits/limits.conf and rely on systemd limits from now on. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1466=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): pam-1.3.0-19.1 pam-debuginfo-1.3.0-19.1 pam-debugsource-1.3.0-19.1 pam-devel-1.3.0-19.1 - openSUSE Leap 42.3 (x86_64): pam-32bit-1.3.0-19.1 pam-debuginfo-32bit-1.3.0-19.1 pam-devel-32bit-1.3.0-19.1 - openSUSE Leap 42.3 (noarch): pam-doc-1.3.0-19.1 References: https://bugzilla.suse.com/1135795

1 0

openSUSE-RU-2019:1458-1: moderate: Recommended update for sysvinit
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for sysvinit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1458-1 Rating: moderate References: #1131982 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysvinit fixes the following issues: - Handle various optional fields of /proc/<pid>/mountinfo on the entry/ies before the hyphen (bsc#1131982) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1458=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): powerd-2.0.2-103.3.1 powerd-debuginfo-2.0.2-103.3.1 powerd-debugsource-2.0.2-103.3.1 sysvinit-debugsource-2.88+-103.3.1 sysvinit-tools-2.88+-103.3.1 sysvinit-tools-debuginfo-2.88+-103.3.1 References: https://bugzilla.suse.com/1131982

1 0

openSUSE-SU-2019:1468-1: important: Security update for ucode-intel
by opensuse-security＠opensuse.org 28 May '19

28 May '19

openSUSE Security Update: Security update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1468-1 Rating: important References: #1111331 Cross-References: CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ucode-intel fixes the following issues: The Intel CPU Microcode was updated to the official QSR 2019.1 Microcode release (bsc#1111331 CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091) ---- new platforms ---------------------------------------- VLV C0 6-37-8/02 00000838 Atom Z series VLV C0 6-37-8/0C 00000838 Celeron N2xxx, Pentium N35xx VLV D0 6-37-9/0F 0000090c Atom E38xx CHV C0 6-4c-3/01 00000368 Atom X series CHV D0 6-4c-4/01 00000411 Atom X series Readded missing in last update: BDX-ML B0/M0/R0 6-4f-1/ef 0b00002e->00000036 Xeon E5/E7 v4; Core i7-69xx/68xx This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1468=1 Package List: - openSUSE Leap 15.0 (x86_64): ucode-intel-20190514-lp150.2.21.1 References: https://www.suse.com/security/cve/CVE-2018-12126.html https://www.suse.com/security/cve/CVE-2018-12127.html https://www.suse.com/security/cve/CVE-2018-12130.html https://www.suse.com/security/cve/CVE-2019-11091.html https://bugzilla.suse.com/1111331

1 0

openSUSE-RU-2019:1467-1: moderate: Recommended update for freerdp
by maintenance＠opensuse.org 28 May '19

28 May '19

openSUSE Recommended Update: Recommended update for freerdp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1467-1 Rating: moderate References: #1129193 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for freerdp fixes the following issues: - freerdp failed to start because of a missing symbol (bsc#1129193) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1467=1 Package List: - openSUSE Leap 15.0 (x86_64): freerdp-2.0.0~rc4-lp150.7.1 freerdp-debuginfo-2.0.0~rc4-lp150.7.1 freerdp-debugsource-2.0.0~rc4-lp150.7.1 freerdp-devel-2.0.0~rc4-lp150.7.1 freerdp-server-2.0.0~rc4-lp150.7.1 freerdp-server-debuginfo-2.0.0~rc4-lp150.7.1 freerdp-wayland-2.0.0~rc4-lp150.7.1 freerdp-wayland-debuginfo-2.0.0~rc4-lp150.7.1 libfreerdp2-2.0.0~rc4-lp150.7.1 libfreerdp2-debuginfo-2.0.0~rc4-lp150.7.1 libuwac0-0-2.0.0~rc4-lp150.7.1 libuwac0-0-debuginfo-2.0.0~rc4-lp150.7.1 libwinpr2-2.0.0~rc4-lp150.7.1 libwinpr2-debuginfo-2.0.0~rc4-lp150.7.1 uwac0-0-devel-2.0.0~rc4-lp150.7.1 winpr2-devel-2.0.0~rc4-lp150.7.1 References: https://bugzilla.suse.com/1129193

1 0

openSUSE-SU-2019:1459-1: moderate: Security update for graphviz
by opensuse-security＠opensuse.org 28 May '19

28 May '19

openSUSE Security Update: Security update for graphviz ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1459-1 Rating: moderate References: #1132091 Cross-References: CVE-2019-11023 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for graphviz fixes the following issues: Security issue fixed: - CVE-2019-11023: Fixed a denial of service vulnerability, which was caused by a NULL pointer dereference in agroot() (bsc#1132091). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1459=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): graphviz-2.40.1-lp150.5.3.1 graphviz-addons-debuginfo-2.40.1-lp150.5.3.1 graphviz-addons-debugsource-2.40.1-lp150.5.3.1 graphviz-debuginfo-2.40.1-lp150.5.3.1 graphviz-debugsource-2.40.1-lp150.5.3.1 graphviz-devel-2.40.1-lp150.5.3.1 graphviz-doc-2.40.1-lp150.5.3.1 graphviz-gd-2.40.1-lp150.5.3.1 graphviz-gd-debuginfo-2.40.1-lp150.5.3.1 graphviz-gnome-2.40.1-lp150.5.3.1 graphviz-gnome-debuginfo-2.40.1-lp150.5.3.1 graphviz-guile-2.40.1-lp150.5.3.1 graphviz-guile-debuginfo-2.40.1-lp150.5.3.1 graphviz-gvedit-2.40.1-lp150.5.3.1 graphviz-gvedit-debuginfo-2.40.1-lp150.5.3.1 graphviz-java-2.40.1-lp150.5.3.1 graphviz-java-debuginfo-2.40.1-lp150.5.3.1 graphviz-lua-2.40.1-lp150.5.3.1 graphviz-lua-debuginfo-2.40.1-lp150.5.3.1 graphviz-perl-2.40.1-lp150.5.3.1 graphviz-perl-debuginfo-2.40.1-lp150.5.3.1 graphviz-php-2.40.1-lp150.5.3.1 graphviz-php-debuginfo-2.40.1-lp150.5.3.1 graphviz-plugins-core-2.40.1-lp150.5.3.1 graphviz-plugins-core-debuginfo-2.40.1-lp150.5.3.1 graphviz-python-2.40.1-lp150.5.3.1 graphviz-python-debuginfo-2.40.1-lp150.5.3.1 graphviz-ruby-2.40.1-lp150.5.3.1 graphviz-ruby-debuginfo-2.40.1-lp150.5.3.1 graphviz-smyrna-2.40.1-lp150.5.3.1 graphviz-smyrna-debuginfo-2.40.1-lp150.5.3.1 graphviz-tcl-2.40.1-lp150.5.3.1 graphviz-tcl-debuginfo-2.40.1-lp150.5.3.1 libgraphviz6-2.40.1-lp150.5.3.1 libgraphviz6-debuginfo-2.40.1-lp150.5.3.1 References: https://www.suse.com/security/cve/CVE-2019-11023.html https://bugzilla.suse.com/1132091

1 0