June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1627-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1627-1 Rating: moderate References: #1040055 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - Fixes an issue in the GUI where a text overlapped with a form field (bsc#1040055) - Fixed an issue with the panel search - Fixed some keyboard navigation issues - Fixes a possible crash on startup - Network: Fix some SSID escaping issues - Power: Fix hiding wi-fi, mobile broadband toggles. - Power: Fix wifi device state when opening power panel. - Privacy: React to changes in permissions store. - User accounts: Fix missing records in the history dialog. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1627=1 Package List: - openSUSE Leap 42.3 (noarch): gnome-control-center-lang-3.20.2-18.9.1 - openSUSE Leap 42.3 (x86_64): gnome-control-center-3.20.2-18.9.1 gnome-control-center-color-3.20.2-18.9.1 gnome-control-center-debuginfo-3.20.2-18.9.1 gnome-control-center-debugsource-3.20.2-18.9.1 gnome-control-center-devel-3.20.2-18.9.1 gnome-control-center-goa-3.20.2-18.9.1 gnome-control-center-user-faces-3.20.2-18.9.1 References: https://bugzilla.suse.com/1040055

1 0

openSUSE-SU-2019:1629-1: moderate: Security update for libmediainfo
by opensuse-security＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Security Update: Security update for libmediainfo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1629-1 Rating: moderate References: #1133156 #1133157 Cross-References: CVE-2019-11372 CVE-2019-11373 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libmediainfo fixes the following issues: * CVE-2019-11373: Fixed out-of-bounds read in function File__Analyze:Get_L8 (boo#1133156) * CVE-2019-11372: Fixed out-of-bounds read in function MediaInfoLib:File__Tags_Helper:Synched_Test (boo#1133157) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1629=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1629=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1629=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmediainfo-debugsource-0.7.96-2.3.1 libmediainfo-devel-0.7.96-2.3.1 libmediainfo0-0.7.96-2.3.1 libmediainfo0-debuginfo-0.7.96-2.3.1 - openSUSE Leap 42.3 (x86_64): libmediainfo0-32bit-0.7.96-2.3.1 libmediainfo0-debuginfo-32bit-0.7.96-2.3.1 - openSUSE Leap 15.0 (i586 x86_64): libmediainfo-debugsource-18.03-lp150.2.3.1 libmediainfo-devel-18.03-lp150.2.3.1 libmediainfo0-18.03-lp150.2.3.1 libmediainfo0-debuginfo-18.03-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libmediainfo0-32bit-18.03-lp150.2.3.1 libmediainfo0-32bit-debuginfo-18.03-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libmediainfo-devel-18.03-bp150.3.3.1 libmediainfo0-18.03-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libmediainfo0-64bit-18.03-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11372.html https://www.suse.com/security/cve/CVE-2019-11373.html https://bugzilla.suse.com/1133156 https://bugzilla.suse.com/1133157

1 0

openSUSE-RU-2019:1630-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1630-1 Rating: moderate References: #1134659 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - change rpcbind locking path from /var/run/rpcbind.lock to /run/rpcbind.lock (bsc#1134659) - change the order of socket/service in the %postun scriptlet to avoid an error from rpcbind.socket when rpcbind is running during package update This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1630=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rpcbind-0.2.3-6.6.1 rpcbind-debuginfo-0.2.3-6.6.1 rpcbind-debugsource-0.2.3-6.6.1 References: https://bugzilla.suse.com/1134659

1 0

openSUSE-RU-2019:1626-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1626-1 Rating: moderate References: #1128598 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Added whitelisting for /usr/lib/singularity/bin/starter-suid in the new singularity 3.1 version. (bsc#1128598) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1626=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): permissions-20180125-lp150.2.13.1 permissions-debuginfo-20180125-lp150.2.13.1 permissions-debugsource-20180125-lp150.2.13.1 References: https://bugzilla.suse.com/1128598

1 0

openSUSE-RU-2019:1625-1: moderate: Recommended update for lua-lua-mpris
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for lua-lua-mpris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1625-1 Rating: moderate References: #1136883 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua-lua-mpris fixes the following issues: Changes in lua-lua-mpris: - Fixed an error introduced by bad last minute refactoring (boo#1136883). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1625=1 Package List: - openSUSE Backports SLE-15 (x86_64): lua51-lua-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 lua53-lua-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 mpv-plugin-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 References: https://bugzilla.suse.com/1136883

1 0

openSUSE-SU-2019:1623-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1623-1 Rating: moderate References: #1138425 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixes the following issues: - disable indirect reads that disclosed file contents from the local system (boo#1138425) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1623=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.27.1 GraphicsMagick-devel-1.3.29-bp150.2.27.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.27.1 libGraphicsMagick++-devel-1.3.29-bp150.2.27.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.27.1 libGraphicsMagick3-config-1.3.29-bp150.2.27.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.27.1 perl-GraphicsMagick-1.3.29-bp150.2.27.1 References: https://bugzilla.suse.com/1138425

1 0

openSUSE-SU-2019:1624-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1624-1 Rating: moderate References: #1137822 #1137823 #1137828 Cross-References: CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults (CVE-2018-19800, boo#1137828, CVE-2018-19801, boo#1137822, CVE-2018-19802, boo#1137823): This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1624=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): python-aubio-debugsource-0.4.6-bp150.3.12.1 python2-aubio-0.4.6-bp150.3.12.1 python2-aubio-debuginfo-0.4.6-bp150.3.12.1 python3-aubio-0.4.6-bp150.3.12.1 python3-aubio-debuginfo-0.4.6-bp150.3.12.1 - openSUSE Backports SLE-15 (x86_64): aubio-tools-0.4.6-bp150.3.12.1 libaubio-devel-0.4.6-bp150.3.12.1 libaubio5-0.4.6-bp150.3.12.1 References: https://www.suse.com/security/cve/CVE-2018-19800.html https://www.suse.com/security/cve/CVE-2018-19801.html https://www.suse.com/security/cve/CVE-2018-19802.html https://bugzilla.suse.com/1137822 https://bugzilla.suse.com/1137823 https://bugzilla.suse.com/1137828

1 0

openSUSE-RU-2019:1622-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1622-1 Rating: moderate References: #1107771 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes the following issues: Changes in gnuhealth: - correction for gnuhealth-control (v 3.2.4) - Adding a dummy executable called 'gnuhealth' with some help text (boo#1107771) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1622=1 Package List: - openSUSE Backports SLE-15 (noarch): gnuhealth-3.2.10-bp150.5.14.1 References: https://bugzilla.suse.com/1107771

1 0

openSUSE-SU-2019:1621-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1621-1 Rating: moderate References: #1096726 Cross-References: CVE-2018-15664 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker fixes the following issues: Security issue fixed: - CVE-2018-15664: Fixed an issue which could make docker cp vulnerable to symlink-exchange race attacks (bsc#1096726). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1621=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1621=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-18.09.6_ce-lp151.2.6.1 docker-debuginfo-18.09.6_ce-lp151.2.6.1 docker-debugsource-18.09.6_ce-lp151.2.6.1 docker-test-18.09.6_ce-lp151.2.6.1 docker-test-debuginfo-18.09.6_ce-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): docker-bash-completion-18.09.6_ce-lp151.2.6.1 docker-zsh-completion-18.09.6_ce-lp151.2.6.1 - openSUSE Leap 15.0 (x86_64): docker-18.09.6_ce-lp150.5.20.1 docker-debuginfo-18.09.6_ce-lp150.5.20.1 docker-debugsource-18.09.6_ce-lp150.5.20.1 docker-test-18.09.6_ce-lp150.5.20.1 docker-test-debuginfo-18.09.6_ce-lp150.5.20.1 - openSUSE Leap 15.0 (noarch): docker-bash-completion-18.09.6_ce-lp150.5.20.1 docker-zsh-completion-18.09.6_ce-lp150.5.20.1 References: https://www.suse.com/security/cve/CVE-2018-15664.html https://bugzilla.suse.com/1096726

1 0

openSUSE-RU-2019:1620-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1620-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc updated to 2.4.3: - Fix library loading issues in the Snap and macOS releases [#3247] - Fix various keyboard navigation issues [#3248] - Fix main window toggling regression when clicking the tray icon on KDE [#3258] - Add documentation for keyboard shortcuts to source code distribution [#3215] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1620=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1620=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1620=1 Package List: - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.4.3-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.4.3-lp151.2.6.1 keepassxc-debuginfo-2.4.3-lp151.2.6.1 keepassxc-debugsource-2.4.3-lp151.2.6.1 - openSUSE Leap 15.0 (noarch): keepassxc-lang-2.4.3-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): keepassxc-2.4.3-lp150.2.12.1 keepassxc-debuginfo-2.4.3-lp150.2.12.1 keepassxc-debugsource-2.4.3-lp150.2.12.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): keepassxc-2.4.3-bp150.2.12.1 - openSUSE Backports SLE-15 (noarch): keepassxc-lang-2.4.3-bp150.2.12.1 References:

1 0

openSUSE-SU-2019:1619-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1619-1 Rating: moderate References: #1138425 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixes the following issues: - disable indirect reads that disclosed file contents from the local system (boo#1138425) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1619=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1619=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1619=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): GraphicsMagick-1.3.25-144.1 GraphicsMagick-debuginfo-1.3.25-144.1 GraphicsMagick-debugsource-1.3.25-144.1 GraphicsMagick-devel-1.3.25-144.1 libGraphicsMagick++-Q16-12-1.3.25-144.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-144.1 libGraphicsMagick++-devel-1.3.25-144.1 libGraphicsMagick-Q16-3-1.3.25-144.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-144.1 libGraphicsMagick3-config-1.3.25-144.1 libGraphicsMagickWand-Q16-2-1.3.25-144.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-144.1 perl-GraphicsMagick-1.3.25-144.1 perl-GraphicsMagick-debuginfo-1.3.25-144.1 - openSUSE Leap 15.1 (x86_64): GraphicsMagick-1.3.29-lp151.4.6.1 GraphicsMagick-debuginfo-1.3.29-lp151.4.6.1 GraphicsMagick-debugsource-1.3.29-lp151.4.6.1 GraphicsMagick-devel-1.3.29-lp151.4.6.1 libGraphicsMagick++-Q16-12-1.3.29-lp151.4.6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp151.4.6.1 libGraphicsMagick++-devel-1.3.29-lp151.4.6.1 libGraphicsMagick-Q16-3-1.3.29-lp151.4.6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp151.4.6.1 libGraphicsMagick3-config-1.3.29-lp151.4.6.1 libGraphicsMagickWand-Q16-2-1.3.29-lp151.4.6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp151.4.6.1 perl-GraphicsMagick-1.3.29-lp151.4.6.1 perl-GraphicsMagick-debuginfo-1.3.29-lp151.4.6.1 - openSUSE Leap 15.0 (x86_64): GraphicsMagick-1.3.29-lp150.3.34.1 GraphicsMagick-debuginfo-1.3.29-lp150.3.34.1 GraphicsMagick-debugsource-1.3.29-lp150.3.34.1 GraphicsMagick-devel-1.3.29-lp150.3.34.1 libGraphicsMagick++-Q16-12-1.3.29-lp150.3.34.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.29-lp150.3.34.1 libGraphicsMagick++-devel-1.3.29-lp150.3.34.1 libGraphicsMagick-Q16-3-1.3.29-lp150.3.34.1 libGraphicsMagick-Q16-3-debuginfo-1.3.29-lp150.3.34.1 libGraphicsMagick3-config-1.3.29-lp150.3.34.1 libGraphicsMagickWand-Q16-2-1.3.29-lp150.3.34.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.29-lp150.3.34.1 perl-GraphicsMagick-1.3.29-lp150.3.34.1 perl-GraphicsMagick-debuginfo-1.3.29-lp150.3.34.1 References: https://bugzilla.suse.com/1138425

1 0

openSUSE-RU-2019:1615-1: moderate: Recommended update for gnome-nettool
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for gnome-nettool ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1615-1 Rating: moderate References: #1130398 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-nettool fixes the following issues: - Adds support for GigE (bsc#1130398) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1615=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-nettool-3.8.1-12.3.1 gnome-nettool-debuginfo-3.8.1-12.3.1 gnome-nettool-debugsource-3.8.1-12.3.1 - openSUSE Leap 42.3 (noarch): gnome-nettool-lang-3.8.1-12.3.1 References: https://bugzilla.suse.com/1130398

1 0

openSUSE-RU-2019:1616-1: moderate: Recommended update for cloud-netconfig
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for cloud-netconfig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1616-1 Rating: moderate References: #1135257 #1135263 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for cloud-netconfig fixes the following issues: - cloud-netconfig will now pause and retry if API call throttling is detected in Azure (bsc#1135257, bsc#1135263) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1616=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1616=1 Package List: - openSUSE Leap 15.1 (noarch): cloud-netconfig-azure-1.0-lp151.2.3.1 cloud-netconfig-ec2-1.0-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): cloud-netconfig-azure-1.0-lp150.4.10.1 cloud-netconfig-ec2-1.0-lp150.4.10.1 References: https://bugzilla.suse.com/1135257 https://bugzilla.suse.com/1135263

1 0

openSUSE-SU-2019:1614-1: important: Security update for python-Jinja2
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for python-Jinja2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1614-1 Rating: important References: #1125815 #1132174 #1132323 Cross-References: CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for python-Jinja2 fixes the following issues: Security issues fixed: - CVE-2016-10745: Fixed a sandbox escape caused by an information disclosure via str.format (bsc#1132174). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). - CVE-2019-8341: Fixed command injection in function from_string (bsc#1125815). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1614=1 Package List: - openSUSE Leap 42.3 (noarch): python-Jinja2-2.8-10.4.1 python-Jinja2-emacs-2.8-10.4.1 python-Jinja2-vim-2.8-10.4.1 python3-Jinja2-2.8-10.4.1 References: https://www.suse.com/security/cve/CVE-2016-10745.html https://www.suse.com/security/cve/CVE-2019-10906.html https://www.suse.com/security/cve/CVE-2019-8341.html https://bugzilla.suse.com/1125815 https://bugzilla.suse.com/1132174 https://bugzilla.suse.com/1132323

1 0

openSUSE-RU-2019:1617-1: moderate: Recommended update for mumble
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for mumble ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1617-1 Rating: moderate References: #1132350 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mumble fixes the following issues: - Enable speechd everywhere now. - update murmurd AppArmor profile - update bash path for usrMerge (boo#1132350) - use abstractions/openssl instead of a rule for openssl.cnf Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1617=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): mumble-1.2.19-lp151.4.3.1 mumble-debuginfo-1.2.19-lp151.4.3.1 mumble-debugsource-1.2.19-lp151.4.3.1 mumble-server-1.2.19-lp151.4.3.1 mumble-server-debuginfo-1.2.19-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): mumble-32bit-1.2.19-lp151.4.3.1 mumble-32bit-debuginfo-1.2.19-lp151.4.3.1 References: https://bugzilla.suse.com/1132350

1 0

openSUSE-SU-2019:1618-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1618-1 Rating: moderate References: #1137822 #1137823 #1137828 Cross-References: CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults (CVE-2018-19800, boo#1137828, CVE-2018-19801, boo#1137822, CVE-2018-19802, boo#1137823): Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1618=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1618=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1618=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): aubio-debugsource-0.4.1-9.13.1 aubio-tools-0.4.1-9.13.1 aubio-tools-debuginfo-0.4.1-9.13.1 libaubio-devel-0.4.1-9.13.1 libaubio4-0.4.1-9.13.1 libaubio4-debuginfo-0.4.1-9.13.1 - openSUSE Leap 42.3 (x86_64): libaubio4-32bit-0.4.1-9.13.1 libaubio4-debuginfo-32bit-0.4.1-9.13.1 - openSUSE Leap 15.1 (i586 x86_64): aubio-debugsource-0.4.6-lp151.6.3.1 aubio-tools-0.4.6-lp151.6.3.1 aubio-tools-debuginfo-0.4.6-lp151.6.3.1 libaubio-devel-0.4.6-lp151.6.3.1 libaubio5-0.4.6-lp151.6.3.1 libaubio5-debuginfo-0.4.6-lp151.6.3.1 - openSUSE Leap 15.1 (x86_64): libaubio5-32bit-0.4.6-lp151.6.3.1 libaubio5-32bit-debuginfo-0.4.6-lp151.6.3.1 python-aubio-debugsource-0.4.6-lp151.6.3.1 python2-aubio-0.4.6-lp151.6.3.1 python2-aubio-debuginfo-0.4.6-lp151.6.3.1 python3-aubio-0.4.6-lp151.6.3.1 python3-aubio-debuginfo-0.4.6-lp151.6.3.1 - openSUSE Leap 15.0 (i586 x86_64): aubio-debugsource-0.4.6-lp150.3.10.1 aubio-tools-0.4.6-lp150.3.10.1 aubio-tools-debuginfo-0.4.6-lp150.3.10.1 libaubio-devel-0.4.6-lp150.3.10.1 libaubio5-0.4.6-lp150.3.10.1 libaubio5-debuginfo-0.4.6-lp150.3.10.1 - openSUSE Leap 15.0 (x86_64): libaubio5-32bit-0.4.6-lp150.3.10.1 libaubio5-32bit-debuginfo-0.4.6-lp150.3.10.1 python-aubio-debugsource-0.4.6-lp150.3.10.1 python2-aubio-0.4.6-lp150.3.10.1 python2-aubio-debuginfo-0.4.6-lp150.3.10.1 python3-aubio-0.4.6-lp150.3.10.1 python3-aubio-debuginfo-0.4.6-lp150.3.10.1 References: https://www.suse.com/security/cve/CVE-2018-19800.html https://www.suse.com/security/cve/CVE-2018-19801.html https://www.suse.com/security/cve/CVE-2018-19802.html https://bugzilla.suse.com/1137822 https://bugzilla.suse.com/1137823 https://bugzilla.suse.com/1137828

1 0

openSUSE-SU-2019:1612-1: important: Security update for enigmail
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1612-1 Rating: important References: #1135855 Cross-References: CVE-2019-12269 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for enigmail fixes the following issues: enigmail was updated to 2.0.11: * CVE-2019-12269: Specially crafted inline PGP messages could spoof a "correctly signed" message (boo#1135855) enigmail was updated to 2.0.10: * various bug fixes for configuring and handling encrypted e-mail * UI fixes for dialogs, messages, and dark Thunderbird themes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1612=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1612=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1612=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-1612=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): enigmail-2.0.11-31.1 - openSUSE Leap 15.1 (x86_64): enigmail-2.0.11-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): enigmail-2.0.11-lp150.31.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): enigmail-2.0.11-31.1 References: https://www.suse.com/security/cve/CVE-2019-12269.html https://bugzilla.suse.com/1135855

1 0

openSUSE-SU-2019:1612-1: important: Security update for enigmail
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for enigmail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1612-1 Rating: important References: #1135855 Cross-References: CVE-2019-12269 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for enigmail fixes the following issues: enigmail was updated to 2.0.11: * CVE-2019-12269: Specially crafted inline PGP messages could spoof a "correctly signed" message (boo#1135855) enigmail was updated to 2.0.10: * various bug fixes for configuring and handling encrypted e-mail * UI fixes for dialogs, messages, and dark Thunderbird themes Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1612=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1612=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1612=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): enigmail-2.0.11-31.1 - openSUSE Leap 15.1 (x86_64): enigmail-2.0.11-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): enigmail-2.0.11-lp150.31.1 References: https://www.suse.com/security/cve/CVE-2019-12269.html https://bugzilla.suse.com/1135855

1 0

openSUSE-RU-2019:1613-1: moderate: Recommended update for cloud-init
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for cloud-init ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1613-1 Rating: moderate References: #1116767 #1119397 #1121878 #1123694 #1125950 #1125992 #1126101 #1132692 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for cloud-init to version 18.5 fixes the following issues: - When the user configures a new rules file for network devices the rules may not apply immediately, trigger udevadm (bsc#1125950) - Fix the order of calls, the SUSE implementation of route config file writing must clobber the default implementation (bsc#1125992) - Use the proper name to designate IPv6 addresses in ifcfg-* files (bsc#1126101) - Drop a '-' in the route file for the last column (bsc#1123694) - Fixes an issue where only the last route was defined for a subnet (bsc#1132692) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1613=1 Package List: - openSUSE Leap 15.0 (x86_64): cloud-init-18.5-lp150.2.13.1 cloud-init-config-suse-18.5-lp150.2.13.1 cloud-init-doc-18.5-lp150.2.13.1 References: https://bugzilla.suse.com/1116767 https://bugzilla.suse.com/1119397 https://bugzilla.suse.com/1121878 https://bugzilla.suse.com/1123694 https://bugzilla.suse.com/1125950 https://bugzilla.suse.com/1125992 https://bugzilla.suse.com/1126101 https://bugzilla.suse.com/1132692

1 0

openSUSE-RU-2019:1611-1: moderate: Recommended update for rclone
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for rclone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1611-1 Rating: moderate References: #1137685 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rclone fixes the following issues: rclone was updated to version 1.47.0. boo#1137685: - New backends - Backend for Koofr cloud storage service. (jaKa) - New Features - Resume downloads if the reader fails in copy (Nick Craig-Wood) - Use `--fast-list` for listing operations where it won't use more memory (Nick Craig-Wood) - Make `--files-from` traverse the destination unless `--no-traverse` is set (Nick Craig-Wood) - Make server side copy account bytes and obey `--max-transfer` (Nick Craig-Wood) - Add `--create-empty-src-dirs` flag and default to not creating empty dirs (ishuah) - Add client side TLS/SSL flags `--ca-cert`/`--client-cert`/`--client-key` (Nick Craig-Wood) - Implement `--suffix-keep-extension` for use with `--suffix` (Nick Craig-Wood) - serve dlna: Add connection manager service description to improve compatibility (Dan Walters) - lsf: Add 'e' format to show encrypted names and 'o' for original IDs (Nick Craig-Wood) - lsjson: Added `--files-only` and `--dirs-only` flags (calistri) - rc: Implement operations/publiclink the equivalent of `rclone link` (Nick Craig-Wood) - Bug Fixes - accounting: Fix total ETA when `--stats-unit bits` is in effect (Nick Craig-Wood) - Bash TAB completion - Use private custom func to fix clash between rclone and kubectl (Nick Craig-Wood) - Fix for remotes with underscores in their names (Six) - Fix completion of remotes (Florian Gamböck) - Fix autocompletion of remote paths with spaces (Danil Semelenov) - serve dlna: Fix root XML service descriptor (Dan Walters) - ncdu: Fix display corruption with Chinese characters (Nick Craig-Wood) - Add SIGTERM to signals which run the exit handlers on unix (Nick Craig-Wood) - rc: Reload filter when the options are set via the rc (Nick Craig-Wood) - VFS / Mount - Fix FreeBSD: Ignore Truncate if called with no readers and already the correct size (Nick Craig-Wood) - Read directory and check for a file before mkdir (Nick Craig-Wood) - Shorten the locking window for vfs/refresh (Nick Craig-Wood) - Azure Blob - Enable MD5 checksums when uploading files bigger than the "Cutoff" (Dr.Rx) - Fix SAS URL support (Nick Craig-Wood) - B2 - Allow manual configuration of backblaze downloadUrl (Vince) - Ignore already_hidden error on remove (Nick Craig-Wood) - Ignore malformed `src_last_modified_millis` (Nick Craig-Wood) - Drive - Add `--skip-checksum-gphotos` to ignore incorrect checksums on Google Photos (Nick Craig-Wood) - Allow server side move/copy between different remotes. (Fionera) - Add docs on team drives and `--fast-list` eventual consistency (Nestar47) - Fix imports of text files (Nick Craig-Wood) - Fix range requests on 0 length files (Nick Craig-Wood) - Fix creation of duplicates with server side copy (Nick Craig-Wood) - Dropbox - Retry blank errors to fix long listings (Nick Craig-Wood) - FTP - Add `--ftp-concurrency` to limit maximum number of connections (Nick Craig-Wood) - Google Cloud Storage - Fall back to default application credentials (marcintustin) - Allow bucket policy only buckets (Nick Craig-Wood) - HTTP - Add `--http-no-slash` for websites with directories with no slashes (Nick Craig-Wood) - Remove duplicates from listings (Nick Craig-Wood) - Fix socket leak on 404 errors (Nick Craig-Wood) - Jottacloud - Fix token refresh (Sebastian Bünger) - Add device registration (Oliver Heyme) - Onedrive - Implement graceful cancel of multipart uploads if rclone is interrupted (Cnly) - Always add trailing colon to path when addressing items, (Cnly) - Return errors instead of panic for invalid uploads (Fabian Möller) - S3 - Add support for "Glacier Deep Archive" storage class (Manu) - Update Dreamhost endpoint (Nick Craig-Wood) - Note incompatibility with CEPH Jewel (Nick Craig-Wood) - SFTP - Allow custom ssh client config (Alexandru Bumbacea) - Swift - Obey Retry-After to enable OVH restore from cold storage (Nick Craig-Wood) - Work around token expiry on CEPH (Nick Craig-Wood) - WebDAV - Allow IsCollection property to be integer or boolean (Nick Craig-Wood) - Fix race when creating directories (Nick Craig-Wood) - Fix About/df when reading the available/total returns 0 (Nick Craig-Wood) - Add bash-completion and zsh-completion support. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1611=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1611=1 Package List: - openSUSE Leap 15.1 (x86_64): rclone-1.47.0-lp151.3.3.1 rclone-debuginfo-1.47.0-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): rclone-bash-completion-1.47.0-lp151.3.3.1 rclone-zsh-completion-1.47.0-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): rclone-bash-completion-1.47.0-lp150.2.3.1 rclone-zsh-completion-1.47.0-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): rclone-1.47.0-lp150.2.3.1 rclone-debuginfo-1.47.0-lp150.2.3.1 References: https://bugzilla.suse.com/1137685

1 0

openSUSE-SU-2019:1606-1: important: Security update for MozillaThunderbird
by opensuse-security＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Security Update: Security update for MozillaThunderbird ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1606-1 Rating: important References: #1137595 #1138872 Cross-References: CVE-2019-11703 CVE-2019-11704 CVE-2019-11705 CVE-2019-11706 CVE-2019-11707 CVE-2019-11708 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for MozillaThunderbird fixes the following issues: Security issues fixed: - CVE-2019-11703: Fixed a heap-based buffer overflow in icalmemorystrdupanddequote() (bsc#1137595). - CVE-2019-11704: Fixed a heap-based buffer overflow in parser_get_next_char() (bsc#1137595). - CVE-2019-11705: Fixed a stack-based buffer overflow in icalrecur_add_bydayrules() (bsc#1137595). - CVE-2019-11706: Fixed a type confusion in icaltimezone_get_vtimezone_properties() (bsc#1137595). - CVE-2019-11707: Fixed a type confusion in Array.pop (bsc#1138872). - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open (bsc#1138872). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1606=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1606=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaThunderbird-60.7.2-lp151.2.7.1 MozillaThunderbird-buildsymbols-60.7.2-lp151.2.7.1 MozillaThunderbird-debuginfo-60.7.2-lp151.2.7.1 MozillaThunderbird-debugsource-60.7.2-lp151.2.7.1 MozillaThunderbird-translations-common-60.7.2-lp151.2.7.1 MozillaThunderbird-translations-other-60.7.2-lp151.2.7.1 - openSUSE Leap 15.0 (x86_64): MozillaThunderbird-60.7.2-lp150.3.45.1 MozillaThunderbird-buildsymbols-60.7.2-lp150.3.45.1 MozillaThunderbird-debuginfo-60.7.2-lp150.3.45.1 MozillaThunderbird-debugsource-60.7.2-lp150.3.45.1 MozillaThunderbird-translations-common-60.7.2-lp150.3.45.1 MozillaThunderbird-translations-other-60.7.2-lp150.3.45.1 References: https://www.suse.com/security/cve/CVE-2019-11703.html https://www.suse.com/security/cve/CVE-2019-11704.html https://www.suse.com/security/cve/CVE-2019-11705.html https://www.suse.com/security/cve/CVE-2019-11706.html https://www.suse.com/security/cve/CVE-2019-11707.html https://www.suse.com/security/cve/CVE-2019-11708.html https://bugzilla.suse.com/1137595 https://bugzilla.suse.com/1138872

1 0

openSUSE-RU-2019:1608-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1608-1 Rating: moderate References: #1107771 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes the following issues: Changes in gnuhealth: - correction for gnuhealth-control (v 3.2.4) - Adding a dummy executable called 'gnuhealth' with some help text (boo#1107771) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1608=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1608=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1608=1 Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.10-51.1 - openSUSE Leap 15.1 (noarch): gnuhealth-3.4.1-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): gnuhealth-3.2.10-lp150.5.14.1 References: https://bugzilla.suse.com/1107771

1 0

openSUSE-OU-2019:1610-1: Add password-store to Leap 15.0
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Optional Update: Add password-store to Leap 15.0 ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:1610-1 Rating: low References: #1028867 #1097774 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for password-store fixes the following issues: Add password-store cli password manager to openSUSE Leap 15.0 Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1610=1 Package List: - openSUSE Leap 15.0 (noarch): password-store-1.7.3-lp150.2.1 password-store-dmenu-1.7.3-lp150.2.1 References: https://www.suse.com/security/cve/CVE-2018-12356.html https://bugzilla.suse.com/1028867 https://bugzilla.suse.com/1097774

1 0

openSUSE-RU-2019:1609-1: moderate: Recommended update for yast2-storage-ng, libstorage-ng, and autoyast2
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for yast2-storage-ng, libstorage-ng, and autoyast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1609-1 Rating: moderate References: #1104899 #1120979 #1121720 #1122660 #1130256 #1134330 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for libstorage-ng, yast2-storage-ng, and autoyast2 fixes the following issues: # Package: yast2-storage-ng - Fixes broken support for retaining existing MD RAIDs in some scenarios (bsc#1120979, bsc#1121720). - Adds support for installing over NFS (bsc#1130256). - Adds a new format for importing/exporting NFS drives - It will no longer ask for a reusable filesystem when it's not really needed (bsc#1134330) # Package: libstorage-ng - Does no longer crash when parsing docker devices (bsc#1104899) # Package: autoyast2 - Removed check for available devices. When there are no devices, the proposal issues will be shown (bsc#1130256) - Fixes an issue where IPv6 gets activated even if it was deactivated (bsc#1122660) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1609=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libstorage-ng-debuginfo-3.3.318-lp150.2.19.1 libstorage-ng-debugsource-3.3.318-lp150.2.19.1 libstorage-ng-devel-3.3.318-lp150.2.19.1 libstorage-ng-integration-tests-3.3.318-lp150.2.19.1 libstorage-ng-python3-3.3.318-lp150.2.19.1 libstorage-ng-python3-debuginfo-3.3.318-lp150.2.19.1 libstorage-ng-ruby-3.3.318-lp150.2.19.1 libstorage-ng-ruby-debuginfo-3.3.318-lp150.2.19.1 libstorage-ng-utils-3.3.318-lp150.2.19.1 libstorage-ng-utils-debuginfo-3.3.318-lp150.2.19.1 libstorage-ng1-3.3.318-lp150.2.19.1 libstorage-ng1-debuginfo-3.3.318-lp150.2.19.1 yast2-storage-ng-4.0.221-lp150.2.28.1 - openSUSE Leap 15.0 (noarch): autoyast2-4.0.69-lp150.2.19.1 autoyast2-installation-4.0.69-lp150.2.19.1 libstorage-ng-lang-3.3.318-lp150.2.19.1 References: https://bugzilla.suse.com/1104899 https://bugzilla.suse.com/1120979 https://bugzilla.suse.com/1121720 https://bugzilla.suse.com/1122660 https://bugzilla.suse.com/1130256 https://bugzilla.suse.com/1134330

1 0

openSUSE-RU-2019:1607-1: moderate: Recommended update for kmail
by maintenance＠opensuse.org 24 Jun '19

24 Jun '19

openSUSE Recommended Update: Recommended update for kmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1607-1 Rating: moderate References: #1055079 #1136481 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kmail fixes the following issues: - Ensure that the "To:" field always has focus when creating a new mail (boo#1136481, kde#407967) - Set icon name for "new mail" systray icon instead of passing bitmap data to avoid bad visibility with certain desktop settings, dark themes in particular (boo#1055079) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1607=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1607=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1607=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1607=1 Package List: - openSUSE Leap 42.3 (noarch): kmail-lang-17.04.2-6.1 - openSUSE Leap 42.3 (x86_64): kmail-17.04.2-6.1 kmail-application-icons-17.04.2-6.1 kmail-debuginfo-17.04.2-6.1 kmail-debugsource-17.04.2-6.1 ktnef-17.04.2-6.1 ktnef-debuginfo-17.04.2-6.1 - openSUSE Leap 15.1 (x86_64): kmail-18.12.3-lp151.3.7.1 kmail-application-icons-18.12.3-lp151.3.7.1 kmail-debuginfo-18.12.3-lp151.3.7.1 kmail-debugsource-18.12.3-lp151.3.7.1 ktnef-18.12.3-lp151.3.7.1 ktnef-debuginfo-18.12.3-lp151.3.7.1 - openSUSE Leap 15.1 (noarch): kmail-lang-18.12.3-lp151.3.7.1 - openSUSE Leap 15.0 (x86_64): kmail-17.12.3-lp150.2.3.1 kmail-application-icons-17.12.3-lp150.2.3.1 kmail-debuginfo-17.12.3-lp150.2.3.1 kmail-debugsource-17.12.3-lp150.2.3.1 ktnef-17.12.3-lp150.2.3.1 ktnef-debuginfo-17.12.3-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): kmail-lang-17.12.3-lp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): kmail-17.12.3-bp150.3.3.1 kmail-application-icons-17.12.3-bp150.3.3.1 ktnef-17.12.3-bp150.3.3.1 - openSUSE Backports SLE-15 (noarch): kmail-lang-17.12.3-bp150.3.3.1 References: https://bugzilla.suse.com/1055079 https://bugzilla.suse.com/1136481

1 0