June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:1637-1: moderate: Security update for compat-openssl098
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for compat-openssl098 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1637-1 Rating: moderate References: #1117951 #1127080 #1131291 Cross-References: CVE-2019-1559 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for compat-openssl098 fixes the following issues: - CVE-2019-1559: Fix 0-byte record padding oracle via SSL_shutdown (bsc#1127080) - Reject invalid EC point coordinates (bsc#1131291) - Fixed "The 9 Lives of Bleichenbacher's CAT: Cache ATtacks on TLS Implementations" (bsc#1117951) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1637=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): compat-openssl098-debugsource-0.9.8j-30.1 libopenssl0_9_8-0.9.8j-30.1 libopenssl0_9_8-debuginfo-0.9.8j-30.1 - openSUSE Leap 42.3 (x86_64): libopenssl0_9_8-32bit-0.9.8j-30.1 libopenssl0_9_8-debuginfo-32bit-0.9.8j-30.1 References: https://www.suse.com/security/cve/CVE-2019-1559.html https://bugzilla.suse.com/1117951 https://bugzilla.suse.com/1127080 https://bugzilla.suse.com/1131291

1 0

openSUSE-SU-2019:1635-1: moderate: Security update for ansible
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1635-1 Rating: moderate References: #1109957 #1112959 #1118896 #1126503 Cross-References: CVE-2018-16837 CVE-2018-16859 CVE-2018-16876 CVE-2019-3828 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ansible fixes the following issues: Ansible was updated to version 2.8.1: Full changelog is at /usr/share/doc/packages/ansible/changelogs/ - Bugfixes - ACI - DO not encode query_string - ACI modules - Fix non-signature authentication - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading - Fix "Interface not found" errors when using eos_l2_interface with nonexistant interfaces configured - Fix cannot get credential when `source_auth` set to `credential_file`. - Fix netconf_config backup string issue - Fix privilege escalation support for the docker connection plugin when credentials need to be supplied (e.g. sudo with password). - Fix vyos cli prompt inspection - Fixed loading namespaced documentation fragments from collections. - Fixing bug came up after running cnos_vrf module against coverity. - Properly handle data importer failures on PVC creation, instead of timing out. - To fix the ios static route TC failure in CI - To fix the nios member module params - To fix the nios_zone module idempotency failure - add terminal initial prompt for initial connection - allow include_role to work with ansible command - allow python_requirements_facts to report on dependencies containing dashes - asa_config fix - azure_rm_roledefinition - fix a small error in build scope. - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network peering. - cgroup_perf_recap - When not using file_per_task, make sure we don't prematurely close the perf files - display underlying error when reporting an invalid ``tasks:`` block. - dnf - fix wildcard matching for state: absent - docker connection plugin - accept version ``dev`` as 'newest version' and print warning. - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available since docker-py 1.8.0, not 2.0.0 as assumed by the version check. - docker_container - fix network creation when ``networks_cli_compatible`` is enabled. - docker_container - use docker API's ``restart`` instead of ``stop``/``start`` to restart a container. - docker_image - if ``build`` was not specified, the wrong default for ``build.rm`` is used. - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the module failed. - docker_image - module failed when ``source: build`` was set but ``build.path`` options not specified. - docker_network module - fix idempotency when using ``aux_addresses`` in ``ipam_config``. - ec2_instance - make Name tag idempotent - eos: don't fail modules without become set, instead show message and continue - eos_config: check for session support when asked to 'diff_against: session' - eos_eapi: fix idempotency issues when vrf was unspecified. - fix bugs for ce - more info see - fix incorrect uses of to_native that should be to_text instead. - hcloud_volume - Fix idempotency when attaching a server to a volume. - ibm_storage - Added a check for null fields in ibm_storage utils module. - include_tasks - whitelist ``listen`` as a valid keyword - k8s - resource updates applied with force work correctly now - keep results subset also when not no_log. - meraki_switchport - improve reliability with native VLAN functionality. - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and clearing functionality - netapp_e_volumes - fix workload profileId indexing when no previous workload tags exist on the storage array. - nxos_acl some platforms/versions raise when no ACLs are present - nxos_facts fix <https://github.com/ansible/ansible/pull/57009> - nxos_file_copy fix passwordless workflow - nxos_interface Fix admin_state check for n6k - nxos_snmp_traps fix group all for N35 platforms - nxos_snmp_user fix platform fixes for get_snmp_user - nxos_vlan mode idempotence bug - nxos_vlan vlan names containing regex ctl chars should be escaped - nxos_vtp_* modules fix n6k issues - openssl_certificate - fix private key passphrase handling for ``cryptography`` backend. - openssl_pkcs12 - fixes crash when private key has a passphrase and the module is run a second time. - os_stack - Apply tags conditionally so that the module does not throw up an error when using an older distro of openstacksdk - pass correct loading context to persistent connections other than local - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux - postgresql - added initial SSL related tests - postgresql - added missing_required_libs, removed excess param mapping - postgresql - move connect_to_db and get_pg_version into module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514) - postgresql_db - add note to the documentation about state dump and the incorrect rc (https://github.com/ansible/ansible/pull/57297) - postgresql_db - fix for postgresql_db fails if stderr contains output - postgresql_ping - fixed a typo in the module documentation - preserve actual ssh error when we cannot connect. - route53_facts - the module did not advertise check mode support, causing it not to be run in check mode. - sysctl: the module now also checks the output of STDERR to report if values are correctly set (https://github.com/ansible/ansible/pull/55695) - ufw - correctly check status when logging is off - uri - always return a value for status even during failure - urls - Handle redirects properly for IPv6 address by not splitting on ``:`` and rely on already parsed hostname and port values - vmware_vm_facts - fix the support with regular ESXi - vyos_interface fix <https://github.com/ansible/ansible/pull/57169> - we don't really need to template vars on definition as we do this on demand in templating. - win_acl - Fix qualifier parser when using UNC paths - - win_hostname - Fix non netbios compliant name handling - winrm - Fix issue when attempting to parse CLIXML on send input failure - xenserver_guest - fixed an issue where VM whould be powered off even though check mode is used if reconfiguration requires VM to be powered off. - xenserver_guest - proper error message is shown when maximum number of network interfaces is reached and multiple network interfaces are added at once. - yum - Fix false error message about autoremove not being supported - yum - fix failure when using ``update_cache`` standalone - yum - handle special "_none_" value for proxy in yum.conf and .repo files Update to version 2.8.0 Major changes: * Experimental support for Ansible Collections and content namespacing - Ansible content can now be packaged in a collection and addressed via namespaces. This allows for easier sharing, distribution, and installation of bundled modules/roles/plugins, and consistent rules for accessing specific content via namespaces. * Python interpreter discovery - The first time a Python module runs on a target, Ansible will attempt to discover the proper default Python interpreter to use for the target platform/version (instead of immediately defaulting to /usr/bin/python). You can override this behavior by setting ansible_python_interpreter or via config. (see https://github.com/ansible/ansible/pull/50163) * become - The deprecated CLI arguments for --sudo, --sudo-user, --ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in favor of the more generic --become, --become-user, --become-method, and --ask-become-pass. * become - become functionality has been migrated to a plugin architecture, to allow customization of become functionality and 3rd party become methods (https://github.com/ansible/ansible/pull/50991) - addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837 For the full changelog see /usr/share/doc/packages/ansible/changelogs or online: https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2. 8.rst Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1635=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1635=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1635=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1635=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1635=1 Package List: - openSUSE Leap 42.3 (noarch): ansible-2.8.1-12.1 - openSUSE Leap 15.1 (noarch): ansible-2.8.1-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): ansible-2.8.1-lp150.2.6.1 - openSUSE Backports SLE-15 (noarch): ansible-2.8.1-bp150.3.9.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ansible-2.8.1-12.1 References: https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2018-16859.html https://www.suse.com/security/cve/CVE-2018-16876.html https://www.suse.com/security/cve/CVE-2019-3828.html https://bugzilla.suse.com/1109957 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503

1 0

openSUSE-SU-2019:1639-1: important: Security update for gstreamer-plugins-base
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for gstreamer-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1639-1 Rating: important References: #1133375 Cross-References: CVE-2019-9928 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-plugins-base fixes the following issue: Security issue fixed: - CVE-2019-9928: Fixed a heap-based overflow in the rtsp connection parser (bsc#1133375). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1639=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gstreamer-plugins-base-1.8.3-8.3.1 gstreamer-plugins-base-debuginfo-1.8.3-8.3.1 gstreamer-plugins-base-debugsource-1.8.3-8.3.1 gstreamer-plugins-base-devel-1.8.3-8.3.1 gstreamer-plugins-base-doc-1.8.3-8.3.1 libgstallocators-1_0-0-1.8.3-8.3.1 libgstallocators-1_0-0-debuginfo-1.8.3-8.3.1 libgstapp-1_0-0-1.8.3-8.3.1 libgstapp-1_0-0-debuginfo-1.8.3-8.3.1 libgstaudio-1_0-0-1.8.3-8.3.1 libgstaudio-1_0-0-debuginfo-1.8.3-8.3.1 libgstfft-1_0-0-1.8.3-8.3.1 libgstfft-1_0-0-debuginfo-1.8.3-8.3.1 libgstpbutils-1_0-0-1.8.3-8.3.1 libgstpbutils-1_0-0-debuginfo-1.8.3-8.3.1 libgstriff-1_0-0-1.8.3-8.3.1 libgstriff-1_0-0-debuginfo-1.8.3-8.3.1 libgstrtp-1_0-0-1.8.3-8.3.1 libgstrtp-1_0-0-debuginfo-1.8.3-8.3.1 libgstrtsp-1_0-0-1.8.3-8.3.1 libgstrtsp-1_0-0-debuginfo-1.8.3-8.3.1 libgstsdp-1_0-0-1.8.3-8.3.1 libgstsdp-1_0-0-debuginfo-1.8.3-8.3.1 libgsttag-1_0-0-1.8.3-8.3.1 libgsttag-1_0-0-debuginfo-1.8.3-8.3.1 libgstvideo-1_0-0-1.8.3-8.3.1 libgstvideo-1_0-0-debuginfo-1.8.3-8.3.1 typelib-1_0-GstAllocators-1_0-1.8.3-8.3.1 typelib-1_0-GstApp-1_0-1.8.3-8.3.1 typelib-1_0-GstAudio-1_0-1.8.3-8.3.1 typelib-1_0-GstFft-1_0-1.8.3-8.3.1 typelib-1_0-GstPbutils-1_0-1.8.3-8.3.1 typelib-1_0-GstRtp-1_0-1.8.3-8.3.1 typelib-1_0-GstRtsp-1_0-1.8.3-8.3.1 typelib-1_0-GstSdp-1_0-1.8.3-8.3.1 typelib-1_0-GstTag-1_0-1.8.3-8.3.1 typelib-1_0-GstVideo-1_0-1.8.3-8.3.1 - openSUSE Leap 42.3 (x86_64): gstreamer-plugins-base-32bit-1.8.3-8.3.1 gstreamer-plugins-base-debuginfo-32bit-1.8.3-8.3.1 gstreamer-plugins-base-devel-32bit-1.8.3-8.3.1 libgstallocators-1_0-0-32bit-1.8.3-8.3.1 libgstallocators-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstapp-1_0-0-32bit-1.8.3-8.3.1 libgstapp-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstaudio-1_0-0-32bit-1.8.3-8.3.1 libgstaudio-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstfft-1_0-0-32bit-1.8.3-8.3.1 libgstfft-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstpbutils-1_0-0-32bit-1.8.3-8.3.1 libgstpbutils-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstriff-1_0-0-32bit-1.8.3-8.3.1 libgstriff-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstrtp-1_0-0-32bit-1.8.3-8.3.1 libgstrtp-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstrtsp-1_0-0-32bit-1.8.3-8.3.1 libgstrtsp-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstsdp-1_0-0-32bit-1.8.3-8.3.1 libgstsdp-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgsttag-1_0-0-32bit-1.8.3-8.3.1 libgsttag-1_0-0-debuginfo-32bit-1.8.3-8.3.1 libgstvideo-1_0-0-32bit-1.8.3-8.3.1 libgstvideo-1_0-0-debuginfo-32bit-1.8.3-8.3.1 - openSUSE Leap 42.3 (noarch): gstreamer-plugins-base-lang-1.8.3-8.3.1 References: https://www.suse.com/security/cve/CVE-2019-9928.html https://bugzilla.suse.com/1133375

1 0

openSUSE-RU-2019:1644-1: moderate: Recommended update for samba
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for samba ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1644-1 Rating: moderate References: #1130245 #1134452 #1134697 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for samba fixes the following issues: - Fix cephwrap_flistxattr() debug message (bsc#1134697). - Use the correct directory for vfs_ceph realpath (bsc#1134452). - Explicitly enable libcephfs POSIX ACL support (bsc#1130245). This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1644=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.16+git.166.8fb11cda200-30.1 ctdb-debuginfo-4.6.16+git.166.8fb11cda200-30.1 ctdb-tests-4.6.16+git.166.8fb11cda200-30.1 ctdb-tests-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-binding0-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-binding0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-devel-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-samr-devel-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-samr0-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-samr0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libdcerpc0-4.6.16+git.166.8fb11cda200-30.1 libdcerpc0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libndr-devel-4.6.16+git.166.8fb11cda200-30.1 libndr-krb5pac-devel-4.6.16+git.166.8fb11cda200-30.1 libndr-krb5pac0-4.6.16+git.166.8fb11cda200-30.1 libndr-krb5pac0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libndr-nbt-devel-4.6.16+git.166.8fb11cda200-30.1 libndr-nbt0-4.6.16+git.166.8fb11cda200-30.1 libndr-nbt0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libndr-standard-devel-4.6.16+git.166.8fb11cda200-30.1 libndr-standard0-4.6.16+git.166.8fb11cda200-30.1 libndr-standard0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libndr0-4.6.16+git.166.8fb11cda200-30.1 libndr0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libnetapi-devel-4.6.16+git.166.8fb11cda200-30.1 libnetapi0-4.6.16+git.166.8fb11cda200-30.1 libnetapi0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-credentials-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-credentials0-4.6.16+git.166.8fb11cda200-30.1 libsamba-credentials0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-errors-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-errors0-4.6.16+git.166.8fb11cda200-30.1 libsamba-errors0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-hostconfig-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-hostconfig0-4.6.16+git.166.8fb11cda200-30.1 libsamba-hostconfig0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-passdb-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-passdb0-4.6.16+git.166.8fb11cda200-30.1 libsamba-passdb0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-policy-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-policy0-4.6.16+git.166.8fb11cda200-30.1 libsamba-policy0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamba-util-devel-4.6.16+git.166.8fb11cda200-30.1 libsamba-util0-4.6.16+git.166.8fb11cda200-30.1 libsamba-util0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsamdb-devel-4.6.16+git.166.8fb11cda200-30.1 libsamdb0-4.6.16+git.166.8fb11cda200-30.1 libsamdb0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsmbclient-devel-4.6.16+git.166.8fb11cda200-30.1 libsmbclient0-4.6.16+git.166.8fb11cda200-30.1 libsmbclient0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsmbconf-devel-4.6.16+git.166.8fb11cda200-30.1 libsmbconf0-4.6.16+git.166.8fb11cda200-30.1 libsmbconf0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libsmbldap-devel-4.6.16+git.166.8fb11cda200-30.1 libsmbldap0-4.6.16+git.166.8fb11cda200-30.1 libsmbldap0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libtevent-util-devel-4.6.16+git.166.8fb11cda200-30.1 libtevent-util0-4.6.16+git.166.8fb11cda200-30.1 libtevent-util0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 libwbclient-devel-4.6.16+git.166.8fb11cda200-30.1 libwbclient0-4.6.16+git.166.8fb11cda200-30.1 libwbclient0-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-4.6.16+git.166.8fb11cda200-30.1 samba-client-4.6.16+git.166.8fb11cda200-30.1 samba-client-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-core-devel-4.6.16+git.166.8fb11cda200-30.1 samba-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-debugsource-4.6.16+git.166.8fb11cda200-30.1 samba-libs-4.6.16+git.166.8fb11cda200-30.1 samba-libs-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-pidl-4.6.16+git.166.8fb11cda200-30.1 samba-python-4.6.16+git.166.8fb11cda200-30.1 samba-python-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-test-4.6.16+git.166.8fb11cda200-30.1 samba-test-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-winbind-4.6.16+git.166.8fb11cda200-30.1 samba-winbind-debuginfo-4.6.16+git.166.8fb11cda200-30.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-binding0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-samr0-32bit-4.6.16+git.166.8fb11cda200-30.1 libdcerpc-samr0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libdcerpc0-32bit-4.6.16+git.166.8fb11cda200-30.1 libdcerpc0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-krb5pac0-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-krb5pac0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-nbt0-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-nbt0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-standard0-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr-standard0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr0-32bit-4.6.16+git.166.8fb11cda200-30.1 libndr0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libnetapi0-32bit-4.6.16+git.166.8fb11cda200-30.1 libnetapi0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-credentials0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-credentials0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-errors0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-errors0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-hostconfig0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-hostconfig0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-passdb0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-passdb0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-policy0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-policy0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-util0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamba-util0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamdb0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsamdb0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbclient0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbclient0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbconf0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbconf0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbldap0-32bit-4.6.16+git.166.8fb11cda200-30.1 libsmbldap0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libtevent-util0-32bit-4.6.16+git.166.8fb11cda200-30.1 libtevent-util0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 libwbclient0-32bit-4.6.16+git.166.8fb11cda200-30.1 libwbclient0-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-ceph-4.6.16+git.166.8fb11cda200-30.1 samba-ceph-debuginfo-4.6.16+git.166.8fb11cda200-30.1 samba-client-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-client-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-libs-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-libs-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-winbind-32bit-4.6.16+git.166.8fb11cda200-30.1 samba-winbind-debuginfo-32bit-4.6.16+git.166.8fb11cda200-30.1 - openSUSE Leap 42.3 (noarch): samba-doc-4.6.16+git.166.8fb11cda200-30.1 References: https://bugzilla.suse.com/1130245 https://bugzilla.suse.com/1134452 https://bugzilla.suse.com/1134697

1 0

openSUSE-SU-2019:1635-1: moderate: Security update for ansible
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for ansible ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1635-1 Rating: moderate References: #1109957 #1112959 #1118896 #1126503 Cross-References: CVE-2018-16837 CVE-2018-16859 CVE-2018-16876 CVE-2019-3828 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ansible fixes the following issues: Ansible was updated to version 2.8.1: Full changelog is at /usr/share/doc/packages/ansible/changelogs/ - Bugfixes - ACI - DO not encode query_string - ACI modules - Fix non-signature authentication - Add missing directory provided via ``--playbook-dir`` to adjacent collection loading - Fix "Interface not found" errors when using eos_l2_interface with nonexistant interfaces configured - Fix cannot get credential when `source_auth` set to `credential_file`. - Fix netconf_config backup string issue - Fix privilege escalation support for the docker connection plugin when credentials need to be supplied (e.g. sudo with password). - Fix vyos cli prompt inspection - Fixed loading namespaced documentation fragments from collections. - Fixing bug came up after running cnos_vrf module against coverity. - Properly handle data importer failures on PVC creation, instead of timing out. - To fix the ios static route TC failure in CI - To fix the nios member module params - To fix the nios_zone module idempotency failure - add terminal initial prompt for initial connection - allow include_role to work with ansible command - allow python_requirements_facts to report on dependencies containing dashes - asa_config fix - azure_rm_roledefinition - fix a small error in build scope. - azure_rm_virtualnetworkpeering - fix cross subscriptions virtual network peering. - cgroup_perf_recap - When not using file_per_task, make sure we don't prematurely close the perf files - display underlying error when reporting an invalid ``tasks:`` block. - dnf - fix wildcard matching for state: absent - docker connection plugin - accept version ``dev`` as 'newest version' and print warning. - docker_container - ``oom_killer`` and ``oom_score_adj`` options are available since docker-py 1.8.0, not 2.0.0 as assumed by the version check. - docker_container - fix network creation when ``networks_cli_compatible`` is enabled. - docker_container - use docker API's ``restart`` instead of ``stop``/``start`` to restart a container. - docker_image - if ``build`` was not specified, the wrong default for ``build.rm`` is used. - docker_image - if ``nocache`` set to ``yes`` but not ``build.nocache``, the module failed. - docker_image - module failed when ``source: build`` was set but ``build.path`` options not specified. - docker_network module - fix idempotency when using ``aux_addresses`` in ``ipam_config``. - ec2_instance - make Name tag idempotent - eos: don't fail modules without become set, instead show message and continue - eos_config: check for session support when asked to 'diff_against: session' - eos_eapi: fix idempotency issues when vrf was unspecified. - fix bugs for ce - more info see - fix incorrect uses of to_native that should be to_text instead. - hcloud_volume - Fix idempotency when attaching a server to a volume. - ibm_storage - Added a check for null fields in ibm_storage utils module. - include_tasks - whitelist ``listen`` as a valid keyword - k8s - resource updates applied with force work correctly now - keep results subset also when not no_log. - meraki_switchport - improve reliability with native VLAN functionality. - netapp_e_iscsi_target - fix netapp_e_iscsi_target chap secret size and clearing functionality - netapp_e_volumes - fix workload profileId indexing when no previous workload tags exist on the storage array. - nxos_acl some platforms/versions raise when no ACLs are present - nxos_facts fix <https://github.com/ansible/ansible/pull/57009> - nxos_file_copy fix passwordless workflow - nxos_interface Fix admin_state check for n6k - nxos_snmp_traps fix group all for N35 platforms - nxos_snmp_user fix platform fixes for get_snmp_user - nxos_vlan mode idempotence bug - nxos_vlan vlan names containing regex ctl chars should be escaped - nxos_vtp_* modules fix n6k issues - openssl_certificate - fix private key passphrase handling for ``cryptography`` backend. - openssl_pkcs12 - fixes crash when private key has a passphrase and the module is run a second time. - os_stack - Apply tags conditionally so that the module does not throw up an error when using an older distro of openstacksdk - pass correct loading context to persistent connections other than local - pkg_mgr - Ansible 2.8.0 failing to install yum packages on Amazon Linux - postgresql - added initial SSL related tests - postgresql - added missing_required_libs, removed excess param mapping - postgresql - move connect_to_db and get_pg_version into module_utils/postgres.py (https://github.com/ansible/ansible/pull/55514) - postgresql_db - add note to the documentation about state dump and the incorrect rc (https://github.com/ansible/ansible/pull/57297) - postgresql_db - fix for postgresql_db fails if stderr contains output - postgresql_ping - fixed a typo in the module documentation - preserve actual ssh error when we cannot connect. - route53_facts - the module did not advertise check mode support, causing it not to be run in check mode. - sysctl: the module now also checks the output of STDERR to report if values are correctly set (https://github.com/ansible/ansible/pull/55695) - ufw - correctly check status when logging is off - uri - always return a value for status even during failure - urls - Handle redirects properly for IPv6 address by not splitting on ``:`` and rely on already parsed hostname and port values - vmware_vm_facts - fix the support with regular ESXi - vyos_interface fix <https://github.com/ansible/ansible/pull/57169> - we don't really need to template vars on definition as we do this on demand in templating. - win_acl - Fix qualifier parser when using UNC paths - - win_hostname - Fix non netbios compliant name handling - winrm - Fix issue when attempting to parse CLIXML on send input failure - xenserver_guest - fixed an issue where VM whould be powered off even though check mode is used if reconfiguration requires VM to be powered off. - xenserver_guest - proper error message is shown when maximum number of network interfaces is reached and multiple network interfaces are added at once. - yum - Fix false error message about autoremove not being supported - yum - fix failure when using ``update_cache`` standalone - yum - handle special "_none_" value for proxy in yum.conf and .repo files Update to version 2.8.0 Major changes: * Experimental support for Ansible Collections and content namespacing - Ansible content can now be packaged in a collection and addressed via namespaces. This allows for easier sharing, distribution, and installation of bundled modules/roles/plugins, and consistent rules for accessing specific content via namespaces. * Python interpreter discovery - The first time a Python module runs on a target, Ansible will attempt to discover the proper default Python interpreter to use for the target platform/version (instead of immediately defaulting to /usr/bin/python). You can override this behavior by setting ansible_python_interpreter or via config. (see https://github.com/ansible/ansible/pull/50163) * become - The deprecated CLI arguments for --sudo, --sudo-user, --ask-sudo-pass, -su, --su-user, and --ask-su-pass have been removed, in favor of the more generic --become, --become-user, --become-method, and --ask-become-pass. * become - become functionality has been migrated to a plugin architecture, to allow customization of become functionality and 3rd party become methods (https://github.com/ansible/ansible/pull/50991) - addresses CVE-2018-16859, CVE-2018-16876, CVE-2019-3828, CVE-2018-16837 For the full changelog see /usr/share/doc/packages/ansible/changelogs or online: https://github.com/ansible/ansible/blob/stable-2.8/changelogs/CHANGELOG-v2. 8.rst Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1635=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ansible-2.8.1-12.1 References: https://www.suse.com/security/cve/CVE-2018-16837.html https://www.suse.com/security/cve/CVE-2018-16859.html https://www.suse.com/security/cve/CVE-2018-16876.html https://www.suse.com/security/cve/CVE-2019-3828.html https://bugzilla.suse.com/1109957 https://bugzilla.suse.com/1112959 https://bugzilla.suse.com/1118896 https://bugzilla.suse.com/1126503

1 0

openSUSE-RU-2019:1654-1: moderate: Recommended update for xfsprogs
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1654-1 Rating: moderate References: #1073421 #1122271 #1129859 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xfsprogs fixes the following issues: - xfs_repair: will now allow '/' in attribute names (bsc#1122271) - xfs_repair: will now allow zeroing of corrupt log (bsc#1073421) - enabdled offline (unmounted) filesystem geometry queries (bsc#1129859) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1654=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1654=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xfsprogs-4.15.0-lp151.7.3.1 xfsprogs-debuginfo-4.15.0-lp151.7.3.1 xfsprogs-debugsource-4.15.0-lp151.7.3.1 xfsprogs-devel-4.15.0-lp151.7.3.1 - openSUSE Leap 15.0 (i586 x86_64): xfsprogs-4.15.0-lp150.3.11.1 xfsprogs-debuginfo-4.15.0-lp150.3.11.1 xfsprogs-debugsource-4.15.0-lp150.3.11.1 xfsprogs-devel-4.15.0-lp150.3.11.1 References: https://bugzilla.suse.com/1073421 https://bugzilla.suse.com/1122271 https://bugzilla.suse.com/1129859

1 0

openSUSE-SU-2019:1650-1: important: Security update for glib2
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for glib2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1650-1 Rating: important References: #1103678 #1137001 Cross-References: CVE-2019-12450 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001). Other issue addressed: - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus giving false positives to PackageKit (bsc#1103678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1650=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): glib2-debugsource-2.54.3-lp150.3.10.1 glib2-devel-2.54.3-lp150.3.10.1 glib2-devel-debuginfo-2.54.3-lp150.3.10.1 glib2-devel-static-2.54.3-lp150.3.10.1 glib2-tools-2.54.3-lp150.3.10.1 glib2-tools-debuginfo-2.54.3-lp150.3.10.1 libgio-2_0-0-2.54.3-lp150.3.10.1 libgio-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgio-fam-2.54.3-lp150.3.10.1 libgio-fam-debuginfo-2.54.3-lp150.3.10.1 libglib-2_0-0-2.54.3-lp150.3.10.1 libglib-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgmodule-2_0-0-2.54.3-lp150.3.10.1 libgmodule-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgobject-2_0-0-2.54.3-lp150.3.10.1 libgobject-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgthread-2_0-0-2.54.3-lp150.3.10.1 libgthread-2_0-0-debuginfo-2.54.3-lp150.3.10.1 - openSUSE Leap 15.0 (noarch): gio-branding-upstream-2.54.3-lp150.3.10.1 glib2-lang-2.54.3-lp150.3.10.1 - openSUSE Leap 15.0 (x86_64): glib2-devel-32bit-2.54.3-lp150.3.10.1 glib2-devel-32bit-debuginfo-2.54.3-lp150.3.10.1 glib2-tools-32bit-2.54.3-lp150.3.10.1 glib2-tools-32bit-debuginfo-2.54.3-lp150.3.10.1 libgio-2_0-0-32bit-2.54.3-lp150.3.10.1 libgio-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgio-fam-32bit-2.54.3-lp150.3.10.1 libgio-fam-32bit-debuginfo-2.54.3-lp150.3.10.1 libglib-2_0-0-32bit-2.54.3-lp150.3.10.1 libglib-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgmodule-2_0-0-32bit-2.54.3-lp150.3.10.1 libgmodule-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgobject-2_0-0-32bit-2.54.3-lp150.3.10.1 libgobject-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgthread-2_0-0-32bit-2.54.3-lp150.3.10.1 libgthread-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 References: https://www.suse.com/security/cve/CVE-2019-12450.html https://bugzilla.suse.com/1103678 https://bugzilla.suse.com/1137001

1 0

openSUSE-SU-2019:1649-1: moderate: Security update for exempi
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for exempi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1649-1 Rating: moderate References: #1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1649=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): exempi-debugsource-2.4.5-lp150.2.3.1 exempi-tools-2.4.5-lp150.2.3.1 exempi-tools-debuginfo-2.4.5-lp150.2.3.1 libexempi-devel-2.4.5-lp150.2.3.1 libexempi3-2.4.5-lp150.2.3.1 libexempi3-debuginfo-2.4.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libexempi3-32bit-2.4.5-lp150.2.3.1 libexempi3-32bit-debuginfo-2.4.5-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12648.html https://bugzilla.suse.com/1098946

1 0

openSUSE-RU-2019:1656-1: Recommended update for apache2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1656-1 Rating: low References: #1134294 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - Reinstate apache-22-24-upgrade migration script to enable smooth update from Apache 2.2 to 2.4 [bsc#1134294] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1656=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.3.1 apache2-debuginfo-2.4.33-lp151.8.3.1 apache2-debugsource-2.4.33-lp151.8.3.1 apache2-devel-2.4.33-lp151.8.3.1 apache2-event-2.4.33-lp151.8.3.1 apache2-event-debuginfo-2.4.33-lp151.8.3.1 apache2-example-pages-2.4.33-lp151.8.3.1 apache2-prefork-2.4.33-lp151.8.3.1 apache2-prefork-debuginfo-2.4.33-lp151.8.3.1 apache2-utils-2.4.33-lp151.8.3.1 apache2-utils-debuginfo-2.4.33-lp151.8.3.1 apache2-worker-2.4.33-lp151.8.3.1 apache2-worker-debuginfo-2.4.33-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.3.1 References: https://bugzilla.suse.com/1134294

1 0

openSUSE-RU-2019:1652-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1652-1 Rating: moderate References: #1137038 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents provides the following fixes: - Change message log level for the non action messages. The messages can still be seen using the verbose parameter. (bsc#1137038) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1652=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ldirectord-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-debuginfo-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-debugsource-4.1.1+git0.5a1edf2b-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): monitoring-plugins-metadata-4.1.1+git0.5a1edf2b-lp150.2.16.1 References: https://bugzilla.suse.com/1137038

1 0

openSUSE-RU-2019:1642-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1642-1 Rating: moderate References: #1137038 #1137231 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixes a byte conversion error (bsc#1137038, bsc#1137231) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1642=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ldirectord-4.0.1+git.1495055229.643177f1-24.1 resource-agents-4.0.1+git.1495055229.643177f1-24.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-24.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-24.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-24.1 References: https://bugzilla.suse.com/1137038 https://bugzilla.suse.com/1137231

1 0

openSUSE-SU-2019:1645-1: important: Security update for sqlite3
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1645-1 Rating: important References: #1136976 Cross-References: CVE-2019-8457 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode() when handling invalid rtree tables (bsc#1136976). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1645=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsqlite3-0-3.8.10.2-11.10.1 libsqlite3-0-debuginfo-3.8.10.2-11.10.1 sqlite3-3.8.10.2-11.10.1 sqlite3-debuginfo-3.8.10.2-11.10.1 sqlite3-debugsource-3.8.10.2-11.10.1 sqlite3-devel-3.8.10.2-11.10.1 - openSUSE Leap 42.3 (x86_64): libsqlite3-0-32bit-3.8.10.2-11.10.1 libsqlite3-0-debuginfo-32bit-3.8.10.2-11.10.1 - openSUSE Leap 42.3 (noarch): sqlite3-doc-3.8.10.2-11.10.1 References: https://www.suse.com/security/cve/CVE-2019-8457.html https://bugzilla.suse.com/1136976

1 0

openSUSE-RU-2019:1653-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1653-1 Rating: moderate References: #1134659 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Change rpcbind locking path from /var/run/rpcbind.lock to /run/rpcbind.lock. (bsc#1134659) - Change the order of socket/service in the %postun scriptlet to avoid an error from rpcbind.socket when rpcbind is running during package update. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1653=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1653=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpcbind-0.2.3-lp151.5.3.1 rpcbind-debuginfo-0.2.3-lp151.5.3.1 rpcbind-debugsource-0.2.3-lp151.5.3.1 - openSUSE Leap 15.0 (i586 x86_64): rpcbind-0.2.3-lp150.8.1 rpcbind-debuginfo-0.2.3-lp150.8.1 rpcbind-debugsource-0.2.3-lp150.8.1 References: https://bugzilla.suse.com/1134659

1 0

openSUSE-RU-2019:1655-1: Recommended update for xz
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for xz ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1655-1 Rating: low References: #1135709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xz fixes the following issues: Add SUSE-Public-Domain license as some parts of xz utils (liblzma, xz, xzdec, lzmadec, documentation, translated messages, tests, debug, extra directory) are in public domain licence [bsc#1135709] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1655=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1655=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblzma5-5.2.3-lp151.4.3.1 liblzma5-debuginfo-5.2.3-lp151.4.3.1 xz-5.2.3-lp151.4.3.1 xz-debuginfo-5.2.3-lp151.4.3.1 xz-debugsource-5.2.3-lp151.4.3.1 xz-devel-5.2.3-lp151.4.3.1 xz-static-devel-5.2.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): xz-lang-5.2.3-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): liblzma5-32bit-5.2.3-lp151.4.3.1 liblzma5-32bit-debuginfo-5.2.3-lp151.4.3.1 xz-devel-32bit-5.2.3-lp151.4.3.1 - openSUSE Leap 15.0 (i586 x86_64): liblzma5-5.2.3-lp150.3.3.1 liblzma5-debuginfo-5.2.3-lp150.3.3.1 xz-5.2.3-lp150.3.3.1 xz-debuginfo-5.2.3-lp150.3.3.1 xz-debugsource-5.2.3-lp150.3.3.1 xz-devel-5.2.3-lp150.3.3.1 xz-static-devel-5.2.3-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): xz-lang-5.2.3-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): liblzma5-32bit-5.2.3-lp150.3.3.1 liblzma5-32bit-debuginfo-5.2.3-lp150.3.3.1 xz-devel-32bit-5.2.3-lp150.3.3.1 References: https://bugzilla.suse.com/1135709

1 0

openSUSE-RU-2019:1631-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1631-1 Rating: moderate References: #1132303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware fixes the following issues: kernel firmware was updated to version 20190312: * drm/amdgpu: update picasso to latest from 18.50 branch * drm/amdgpu: update polaris12 to latest from 18.50 branch * drm/amdgpu: update vega20 to latest from 18.50 branch * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0 * rtl_bt: Update firmware for BT part of RTL8822C * linux-firmware: update Marvell 8787/8801/8887 firmware images * linux-firmware: update Marvell 8897/8997 firmware images * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1 * QCA: Add the fw files for BT Chip QCA6174. The update to version 20190221 contained: * linux-firmware: Add AMD SEV firmware * WHENCE: Correct errant entries * amdgpu: update raven2 rlc firmware * amdgpu: drop raven2_sdma1.bin * linux-firmware: Update firmware file for Intel Bluetooth,9560 * linux-firmware: Update firmware file for Intel Bluetooth,9260 * qca: Add firmware files for BT chip wcn3990. * nvidia: add TU10x typec controller firmware The update to version 20190212 contained: * bnx2x: Add FW 7.13.11.0. (bsc#1132303) * amdgpu: add firmware for vega20 from 18.50 * amdgpu: bump year on license * linux-firmware: update Marvell PCIe-USB8997 firmware image * linux-firmware: update Marvell SD8897-B0 firmware image * linux-firmware: add Marvell SD8977 firmware image * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021 * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043 * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024 * ath10k: QCA6174 hw3.0: update board-2.bin This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1631=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-firmware-20190312-lp151.2.3.1 ucode-amd-20190312-lp151.2.3.1 References: https://bugzilla.suse.com/1132303

1 0

openSUSE-RU-2019:1643-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1643-1 Rating: moderate References: #1133847 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - Fixes an issue where the 'readTimeout' option couldn't be used while using imfile with polling mode(bsc#1133847) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1643=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rsyslog-8.24.0-2.16.1 rsyslog-debuginfo-8.24.0-2.16.1 rsyslog-debugsource-8.24.0-2.16.1 rsyslog-diag-tools-8.24.0-2.16.1 rsyslog-diag-tools-debuginfo-8.24.0-2.16.1 rsyslog-doc-8.24.0-2.16.1 rsyslog-module-dbi-8.24.0-2.16.1 rsyslog-module-dbi-debuginfo-8.24.0-2.16.1 rsyslog-module-elasticsearch-8.24.0-2.16.1 rsyslog-module-elasticsearch-debuginfo-8.24.0-2.16.1 rsyslog-module-gcrypt-8.24.0-2.16.1 rsyslog-module-gcrypt-debuginfo-8.24.0-2.16.1 rsyslog-module-gssapi-8.24.0-2.16.1 rsyslog-module-gssapi-debuginfo-8.24.0-2.16.1 rsyslog-module-gtls-8.24.0-2.16.1 rsyslog-module-gtls-debuginfo-8.24.0-2.16.1 rsyslog-module-guardtime-8.24.0-2.16.1 rsyslog-module-guardtime-debuginfo-8.24.0-2.16.1 rsyslog-module-mmnormalize-8.24.0-2.16.1 rsyslog-module-mmnormalize-debuginfo-8.24.0-2.16.1 rsyslog-module-mysql-8.24.0-2.16.1 rsyslog-module-mysql-debuginfo-8.24.0-2.16.1 rsyslog-module-omamqp1-8.24.0-2.16.1 rsyslog-module-omamqp1-debuginfo-8.24.0-2.16.1 rsyslog-module-omhttpfs-8.24.0-2.16.1 rsyslog-module-omhttpfs-debuginfo-8.24.0-2.16.1 rsyslog-module-omtcl-8.24.0-2.16.1 rsyslog-module-omtcl-debuginfo-8.24.0-2.16.1 rsyslog-module-pgsql-8.24.0-2.16.1 rsyslog-module-pgsql-debuginfo-8.24.0-2.16.1 rsyslog-module-relp-8.24.0-2.16.1 rsyslog-module-relp-debuginfo-8.24.0-2.16.1 rsyslog-module-snmp-8.24.0-2.16.1 rsyslog-module-snmp-debuginfo-8.24.0-2.16.1 rsyslog-module-udpspoof-8.24.0-2.16.1 rsyslog-module-udpspoof-debuginfo-8.24.0-2.16.1 References: https://bugzilla.suse.com/1133847

1 0

openSUSE-RU-2019:1651-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1651-1 Rating: moderate References: #1128146 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Update compression flag for qcow2 format. (bsc#1128146) - Refactoring for the evaluation of the compress flag in the runtime config. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1651=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-kiwi-lib-9.17.15-lp150.2.20.1 dracut-kiwi-live-9.17.15-lp150.2.20.1 dracut-kiwi-oem-dump-9.17.15-lp150.2.20.1 dracut-kiwi-oem-repart-9.17.15-lp150.2.20.1 dracut-kiwi-overlay-9.17.15-lp150.2.20.1 kiwi-man-pages-9.17.15-lp150.2.20.1 kiwi-pxeboot-9.17.15-lp150.2.20.1 kiwi-tools-9.17.15-lp150.2.20.1 kiwi-tools-debuginfo-9.17.15-lp150.2.20.1 python-kiwi-debugsource-9.17.15-lp150.2.20.1 python2-kiwi-9.17.15-lp150.2.20.1 python3-kiwi-9.17.15-lp150.2.20.1 References: https://bugzilla.suse.com/1128146

1 0

openSUSE-SU-2019:1646-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1646-1 Rating: moderate References: #1136021 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for wireshark to version 2.4.15 fixes the following issues: Security issue fixed: - Fixed a denial of service in the dissection engine (bsc#1136021). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1646=1 Package List: - openSUSE Leap 42.3 (x86_64): libwireshark9-2.4.15-56.1 libwireshark9-debuginfo-2.4.15-56.1 libwiretap7-2.4.15-56.1 libwiretap7-debuginfo-2.4.15-56.1 libwscodecs1-2.4.15-56.1 libwscodecs1-debuginfo-2.4.15-56.1 libwsutil8-2.4.15-56.1 libwsutil8-debuginfo-2.4.15-56.1 wireshark-2.4.15-56.1 wireshark-debuginfo-2.4.15-56.1 wireshark-debugsource-2.4.15-56.1 wireshark-devel-2.4.15-56.1 wireshark-gtk-2.4.15-56.1 wireshark-gtk-debuginfo-2.4.15-56.1 wireshark-ui-qt-2.4.15-56.1 wireshark-ui-qt-debuginfo-2.4.15-56.1 References: https://bugzilla.suse.com/1136021

1 0

openSUSE-RU-2019:1641-1: Recommended update for nautilus
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for nautilus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1641-1 Rating: low References: #1089892 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nautilus provides the following fix: - Show a notification when disks can be safely removed after unmounting. (bsc#1089892, jsc#SLE-6657) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1641=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-shell-search-provider-nautilus-3.20.3-8.10.1 libnautilus-extension1-3.20.3-8.10.1 libnautilus-extension1-debuginfo-3.20.3-8.10.1 nautilus-3.20.3-8.10.1 nautilus-debuginfo-3.20.3-8.10.1 nautilus-debugsource-3.20.3-8.10.1 nautilus-devel-3.20.3-8.10.1 typelib-1_0-Nautilus-3_0-3.20.3-8.10.1 - openSUSE Leap 42.3 (noarch): nautilus-lang-3.20.3-8.10.1 - openSUSE Leap 42.3 (x86_64): libnautilus-extension1-32bit-3.20.3-8.10.1 libnautilus-extension1-debuginfo-32bit-3.20.3-8.10.1 References: https://bugzilla.suse.com/1089892

1 0

openSUSE-SU-2019:1640-1: moderate: Security update for libssh2_org
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1640-1 Rating: moderate References: #1128481 #1136570 Cross-References: CVE-2019-3860 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1640=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libssh2-1-1.4.3-19.9.1 libssh2-1-debuginfo-1.4.3-19.9.1 libssh2-devel-1.4.3-19.9.1 libssh2_org-debugsource-1.4.3-19.9.1 - openSUSE Leap 42.3 (x86_64): libssh2-1-32bit-1.4.3-19.9.1 libssh2-1-debuginfo-32bit-1.4.3-19.9.1 References: https://www.suse.com/security/cve/CVE-2019-3860.html https://bugzilla.suse.com/1128481 https://bugzilla.suse.com/1136570

1 0

openSUSE-SU-2019:1633-1: moderate: Security update for SDL2
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1633-1 Rating: moderate References: #1124825 #1134135 Cross-References: CVE-2019-7637 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for SDL2 fixes the following issues: - Remove the fix for CVE-2019-7637, the modification of function SDL_CalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. (bsc#1134135) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1633=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): SDL2-debugsource-2.0.8-lp151.4.3.1 libSDL2-2_0-0-2.0.8-lp151.4.3.1 libSDL2-2_0-0-debuginfo-2.0.8-lp151.4.3.1 libSDL2-devel-2.0.8-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libSDL2-2_0-0-32bit-2.0.8-lp151.4.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-lp151.4.3.1 libSDL2-devel-32bit-2.0.8-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-7637.html https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1134135

1 0

openSUSE-RU-2019:1648-1: Recommended update for apache2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1648-1 Rating: low References: #1134294 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - Reinstate apache-22-24-upgrade migration script to enable smooth update from Apache 2.2 to 2.4 [bsc#1134294] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1648=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.20.1 apache2-debuginfo-2.4.33-lp150.2.20.1 apache2-debugsource-2.4.33-lp150.2.20.1 apache2-devel-2.4.33-lp150.2.20.1 apache2-event-2.4.33-lp150.2.20.1 apache2-event-debuginfo-2.4.33-lp150.2.20.1 apache2-example-pages-2.4.33-lp150.2.20.1 apache2-prefork-2.4.33-lp150.2.20.1 apache2-prefork-debuginfo-2.4.33-lp150.2.20.1 apache2-utils-2.4.33-lp150.2.20.1 apache2-utils-debuginfo-2.4.33-lp150.2.20.1 apache2-worker-2.4.33-lp150.2.20.1 apache2-worker-debuginfo-2.4.33-lp150.2.20.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.20.1 References: https://bugzilla.suse.com/1134294

1 0

openSUSE-RU-2019:1647-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1647-1 Rating: moderate References: #1128032 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Stop "ls: write error: Broken pipe" messages. (bsc#1128032) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1647=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-3.2.46.1-2.12.1 References: https://bugzilla.suse.com/1128032

1 0

openSUSE-SU-2019:1657-1: moderate: Security update for exempi
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for exempi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1657-1 Rating: moderate References: #1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1657=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): exempi-debugsource-2.4.5-lp151.3.3.1 exempi-tools-2.4.5-lp151.3.3.1 exempi-tools-debuginfo-2.4.5-lp151.3.3.1 libexempi-devel-2.4.5-lp151.3.3.1 libexempi3-2.4.5-lp151.3.3.1 libexempi3-debuginfo-2.4.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libexempi3-32bit-2.4.5-lp151.3.3.1 libexempi3-32bit-debuginfo-2.4.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12648.html https://bugzilla.suse.com/1098946

1 0

openSUSE-RU-2019:1628-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1628-1 Rating: moderate References: #1136266 #1136267 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for google-compute-engine fixes the following issues: Update to version 20190522 (bsc#1136266, bsc#1136267) + Google Compute Engine * Fix guest attributes flow in Python 3. + Google Compute Engine OS Login * Update OS Login control file for FreeBSD support. Update to version 20190521: + Google Compute Engine * Retry download for metadata scripts. * Fix script retrieval in Python 3. * Disable boto config in Python 3. * Update SSH host keys in guest attributes. * Fix XPS settings with more than 64 vCPUs. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1628=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1628=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190522-lp151.2.6.1 google-compute-engine-oslogin-20190522-lp151.2.6.1 google-compute-engine-oslogin-debuginfo-20190522-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190522-lp151.2.6.1 google-compute-engine-oslogin-32bit-debuginfo-20190522-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190522-lp151.2.6.1 - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190522-lp150.2.22.1 google-compute-engine-oslogin-20190522-lp150.2.22.1 google-compute-engine-oslogin-debuginfo-20190522-lp150.2.22.1 - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190522-lp150.2.22.1 References: https://bugzilla.suse.com/1136266 https://bugzilla.suse.com/1136267

1 0