June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1555-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 14 Jun '19

14 Jun '19

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1555-1 Rating: moderate References: #1095960 #1127219 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for lvm2 fixes the following issues: - Sending BLKDISCARD on SSD devices could lead to data loss in test mode (bsc#1095960) - Fix the wrong filter for the cdrom device in /etc/lvm/lvm.conf (bsc#1127219) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1555=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): device-mapper-1.02.146-lp150.6.3.1 device-mapper-debuginfo-1.02.146-lp150.6.3.1 device-mapper-debugsource-1.02.146-lp150.6.3.1 device-mapper-devel-1.02.146-lp150.6.3.1 libdevmapper-event1_03-1.02.146-lp150.6.3.1 libdevmapper-event1_03-debuginfo-1.02.146-lp150.6.3.1 libdevmapper1_03-1.02.146-lp150.6.3.1 libdevmapper1_03-debuginfo-1.02.146-lp150.6.3.1 liblvm2app2_2-2.02.177-lp150.6.3.1 liblvm2app2_2-debuginfo-2.02.177-lp150.6.3.1 liblvm2cmd2_02-2.02.177-lp150.6.3.1 liblvm2cmd2_02-debuginfo-2.02.177-lp150.6.3.1 lvm2-2.02.177-lp150.6.3.1 lvm2-clvm-2.02.177-lp150.6.3.1 lvm2-clvm-debuginfo-2.02.177-lp150.6.3.1 lvm2-clvm-debugsource-2.02.177-lp150.6.3.1 lvm2-cmirrord-2.02.177-lp150.6.3.1 lvm2-cmirrord-debuginfo-2.02.177-lp150.6.3.1 lvm2-debuginfo-2.02.177-lp150.6.3.1 lvm2-debugsource-2.02.177-lp150.6.3.1 lvm2-devel-2.02.177-lp150.6.3.1 lvm2-lockd-2.02.177-lp150.6.3.1 lvm2-lockd-debuginfo-2.02.177-lp150.6.3.1 lvm2-testsuite-2.02.177-lp150.6.3.1 lvm2-testsuite-debuginfo-2.02.177-lp150.6.3.1 - openSUSE Leap 15.0 (x86_64): device-mapper-devel-32bit-1.02.146-lp150.6.3.1 libdevmapper-event1_03-32bit-1.02.146-lp150.6.3.1 libdevmapper-event1_03-32bit-debuginfo-1.02.146-lp150.6.3.1 libdevmapper1_03-32bit-1.02.146-lp150.6.3.1 libdevmapper1_03-32bit-debuginfo-1.02.146-lp150.6.3.1 References: https://bugzilla.suse.com/1095960 https://bugzilla.suse.com/1127219

1 0

openSUSE-RU-2019:1554-1: moderate: Recommended update for lua-lua-mpris
by maintenance＠opensuse.org 14 Jun '19

14 Jun '19

openSUSE Recommended Update: Recommended update for lua-lua-mpris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1554-1 Rating: moderate References: #1136883 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua-lua-mpris fixes the following issues: * Fix crash when media file doesn't have utf8 encoded metadata (boo#1136883) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1554=1 Package List: - openSUSE Backports SLE-15 (x86_64): lua51-lua-mpris-0.0+git20170918.28b1c75-bp150.2.3.1 lua53-lua-mpris-0.0+git20170918.28b1c75-bp150.2.3.1 mpv-plugin-mpris-0.0+git20170918.28b1c75-bp150.2.3.1 References: https://bugzilla.suse.com/1136883

1 0

openSUSE-SU-2019:1553-1: moderate: Security update for rubygem-rack
by opensuse-security＠opensuse.org 13 Jun '19

13 Jun '19

openSUSE Security Update: Security update for rubygem-rack ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1553-1 Rating: moderate References: #1114828 #1116600 Cross-References: CVE-2018-16471 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for rubygem-rack fixes the following issues: Security issued fixed: - CVE-2018-16471: Fixed a cross-site scripting vulnerability via 'scheme' method (bsc#1116600). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1553=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ruby2.1-rubygem-rack-1.6.11-7.3.1 ruby2.1-rubygem-rack-doc-1.6.11-7.3.1 ruby2.1-rubygem-rack-testsuite-1.6.11-7.3.1 ruby2.2-rubygem-rack-1.6.11-7.3.1 ruby2.2-rubygem-rack-doc-1.6.11-7.3.1 ruby2.2-rubygem-rack-testsuite-1.6.11-7.3.1 ruby2.3-rubygem-rack-1.6.11-7.3.1 ruby2.3-rubygem-rack-doc-1.6.11-7.3.1 ruby2.3-rubygem-rack-testsuite-1.6.11-7.3.1 ruby2.4-rubygem-rack-1.6.11-7.3.1 ruby2.4-rubygem-rack-doc-1.6.11-7.3.1 ruby2.4-rubygem-rack-testsuite-1.6.11-7.3.1 References: https://www.suse.com/security/cve/CVE-2018-16471.html https://bugzilla.suse.com/1114828 https://bugzilla.suse.com/1116600

1 0

openSUSE-OU-2019:1552-1: Optional update for btrfsprogs
by maintenance＠opensuse.org 13 Jun '19

13 Jun '19

openSUSE Optional Update: Optional update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-OU-2019:1552-1 Rating: low References: #1134458 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update for btrfsprogs doesn't bring any customer relevant bugfixes or features with it, but only fixes an issue while building this package (bsc#1134458) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Optional Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1552=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): btrfsprogs-4.5.3-7.6.1 btrfsprogs-debuginfo-4.5.3-7.6.1 btrfsprogs-debugsource-4.5.3-7.6.1 libbtrfs-devel-4.5.3-7.6.1 libbtrfs0-4.5.3-7.6.1 libbtrfs0-debuginfo-4.5.3-7.6.1 - openSUSE Leap 42.3 (noarch): btrfsprogs-udev-rules-4.5.3-7.6.1 References: https://bugzilla.suse.com/1134458

1 0

openSUSE-SU-2019:1551-1: important: Security update for neovim
by opensuse-security＠opensuse.org 13 Jun '19

13 Jun '19

openSUSE Security Update: Security update for neovim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1551-1 Rating: important References: #1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for neovim fixes the following issues: Security issue fixed: - CVE-2019-12735: Fixed a potential arbitrary code execution vulnerability in getchar.c (bsc#1137443). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1551=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1551=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1551=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1551=1 Package List: - openSUSE Leap 42.3 (x86_64): neovim-0.2.0-6.1 neovim-debuginfo-0.2.0-6.1 neovim-debugsource-0.2.0-6.1 - openSUSE Leap 42.3 (noarch): neovim-lang-0.2.0-6.1 - openSUSE Leap 15.1 (noarch): neovim-lang-0.3.5-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): neovim-0.3.5-lp151.2.3.1 neovim-debuginfo-0.3.5-lp151.2.3.1 neovim-debugsource-0.3.5-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): neovim-0.3.1-lp150.7.1 neovim-debuginfo-0.3.1-lp150.7.1 neovim-debugsource-0.3.1-lp150.7.1 - openSUSE Leap 15.0 (noarch): neovim-lang-0.3.1-lp150.7.1 - openSUSE Backports SLE-15 (x86_64): neovim-0.3.1-bp150.2.6.1 - openSUSE Backports SLE-15 (noarch): neovim-lang-0.3.1-bp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-12735.html https://bugzilla.suse.com/1137443

1 0

openSUSE-RU-2019:1550-1: moderate: Recommended update for python-tzlocal
by maintenance＠opensuse.org 12 Jun '19

12 Jun '19

openSUSE Recommended Update: Recommended update for python-tzlocal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1550-1 Rating: moderate References: #1137352 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-tzlocal fixes the following issues: - fix fdupes handling as it was linking python2 source into python3 package breaking it boo#1137352 This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1550=1 Package List: - openSUSE Backports SLE-15 (noarch): python2-tzlocal-1.4-bp150.3.6.1 python3-tzlocal-1.4-bp150.3.6.1 References: https://bugzilla.suse.com/1137352

1 0

openSUSE-RU-2019:1549-1: moderate: Recommended update for python-tzlocal
by maintenance＠opensuse.org 12 Jun '19

12 Jun '19

openSUSE Recommended Update: Recommended update for python-tzlocal ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1549-1 Rating: moderate References: #1137352 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-tzlocal fixes the following issues: - fix fdupes handling as it was linking python2 source into python3 package breaking it boo#1137352 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1549=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1549=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1549=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1549=1 Package List: - openSUSE Leap 42.3 (noarch): python-tzlocal-1.1.3-7.4.1 - openSUSE Leap 15.1 (noarch): python2-tzlocal-1.4-lp151.3.3.1 python3-tzlocal-1.4-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): python2-tzlocal-1.4-lp150.2.3.1 python3-tzlocal-1.4-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): python2-tzlocal-1.4-bp150.3.3.1 python3-tzlocal-1.4-bp150.3.3.1 References: https://bugzilla.suse.com/1137352

1 0

openSUSE-RU-2019:1548-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 12 Jun '19

12 Jun '19

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1548-1 Rating: moderate References: #1137070 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yubioath-desktop fixes the following issues: - Version 4.3.6 (released 2019-05-29) (boo#1137070) - Windows: improve support for YubiKey NEO on Windows 10 - Version 4.3.5 (released 2019-01-02) - Bugfix: Show correct message when YubiKey doesn’t have the correct transport enabled - Improve error handling in Slot Mode - Linux: Add experimental support for .AppImage - Version 4.3.4 (released 2018-05-07) - Support YubiKey Preview - Add credential: allow space in secret key. - Bugfix: Don’t show "No credentials found..." incorrectly. - Bugfix: Forget the password when removing the device. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1548=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): yubioath-desktop-4.3.6-bp150.3.3.1 References: https://bugzilla.suse.com/1137070

1 0

openSUSE-SU-2019:1547-1: important: Security update for virtualbox
by opensuse-security＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1547-1 Rating: important References: #1122212 Cross-References: CVE-2018-0734 CVE-2018-11763 CVE-2018-11784 CVE-2018-3309 CVE-2019-2446 CVE-2019-2448 CVE-2019-2450 CVE-2019-2451 CVE-2019-2500 CVE-2019-2501 CVE-2019-2504 CVE-2019-2505 CVE-2019-2506 CVE-2019-2508 CVE-2019-2509 CVE-2019-2511 CVE-2019-2520 CVE-2019-2521 CVE-2019-2522 CVE-2019-2523 CVE-2019-2524 CVE-2019-2525 CVE-2019-2526 CVE-2019-2527 CVE-2019-2548 CVE-2019-2552 CVE-2019-2553 CVE-2019-2554 CVE-2019-2555 CVE-2019-2556 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: This update for virtualbox to version 5.2.24 fixes the following issues: Multiple security issues fixed: CVE-2019-2500, CVE-2019-2524, CVE-2019-2552, CVE-2018-3309, CVE-2019-2520 CVE-2019-2521, CVE-2019-2522, CVE-2019-2523, CVE-2019-2526, CVE-2019-2548 CVE-2018-11763, CVE-2019-2511, CVE-2019-2508, CVE-2019-2509, CVE-2019-2527 CVE-2019-2450, CVE-2019-2451, CVE-2019-2555, CVE-2019-2554, CVE-2019-2556 CVE-2018-11784, CVE-2018-0734, CVE-2019-2525, CVE-2019-2446, CVE-2019-2448 CVE-2019-2501, CVE-2019-2504, CVE-2019-2505, CVE-2019-2506, and CVE-2019-2553 (bsc#1122212). Other issues fixed: - Linux Additions: fix for building vboxvideo on EL 7.6 standard kernel, contributed by Robert Conde - USB: fixed a problem causing failures attaching SuperSpeed devices which report USB version 3.1 (rather than 3.0) on Windows hosts - Audio: added support for surround speaker setups used by Windows 10 Build 1809 - Linux hosts: fixed conflict between Debian and Oracle build desktop files - Linux guests: fixed building drivers on SLES 12.4 - Linux guests: fixed building shared folder driver with older kernels Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1547=1 Package List: - openSUSE Leap 15.0 (x86_64): python3-virtualbox-5.2.24-lp150.4.33.1 python3-virtualbox-debuginfo-5.2.24-lp150.4.33.1 virtualbox-5.2.24-lp150.4.33.1 virtualbox-debuginfo-5.2.24-lp150.4.33.1 virtualbox-debugsource-5.2.24-lp150.4.33.1 virtualbox-devel-5.2.24-lp150.4.33.1 virtualbox-guest-kmp-default-5.2.24_k4.12.14_lp150.12.61-lp150.4.33.1 virtualbox-guest-kmp-default-debuginfo-5.2.24_k4.12.14_lp150.12.61-lp150.4.33.1 virtualbox-guest-tools-5.2.24-lp150.4.33.1 virtualbox-guest-tools-debuginfo-5.2.24-lp150.4.33.1 virtualbox-guest-x11-5.2.24-lp150.4.33.1 virtualbox-guest-x11-debuginfo-5.2.24-lp150.4.33.1 virtualbox-host-kmp-default-5.2.24_k4.12.14_lp150.12.61-lp150.4.33.1 virtualbox-host-kmp-default-debuginfo-5.2.24_k4.12.14_lp150.12.61-lp150.4.33.1 virtualbox-qt-5.2.24-lp150.4.33.1 virtualbox-qt-debuginfo-5.2.24-lp150.4.33.1 virtualbox-vnc-5.2.24-lp150.4.33.1 virtualbox-websrv-5.2.24-lp150.4.33.1 virtualbox-websrv-debuginfo-5.2.24-lp150.4.33.1 - openSUSE Leap 15.0 (noarch): virtualbox-guest-desktop-icons-5.2.24-lp150.4.33.1 virtualbox-guest-source-5.2.24-lp150.4.33.1 virtualbox-host-source-5.2.24-lp150.4.33.1 References: https://www.suse.com/security/cve/CVE-2018-0734.html https://www.suse.com/security/cve/CVE-2018-11763.html https://www.suse.com/security/cve/CVE-2018-11784.html https://www.suse.com/security/cve/CVE-2018-3309.html https://www.suse.com/security/cve/CVE-2019-2446.html https://www.suse.com/security/cve/CVE-2019-2448.html https://www.suse.com/security/cve/CVE-2019-2450.html https://www.suse.com/security/cve/CVE-2019-2451.html https://www.suse.com/security/cve/CVE-2019-2500.html https://www.suse.com/security/cve/CVE-2019-2501.html https://www.suse.com/security/cve/CVE-2019-2504.html https://www.suse.com/security/cve/CVE-2019-2505.html https://www.suse.com/security/cve/CVE-2019-2506.html https://www.suse.com/security/cve/CVE-2019-2508.html https://www.suse.com/security/cve/CVE-2019-2509.html https://www.suse.com/security/cve/CVE-2019-2511.html https://www.suse.com/security/cve/CVE-2019-2520.html https://www.suse.com/security/cve/CVE-2019-2521.html https://www.suse.com/security/cve/CVE-2019-2522.html https://www.suse.com/security/cve/CVE-2019-2523.html https://www.suse.com/security/cve/CVE-2019-2524.html https://www.suse.com/security/cve/CVE-2019-2525.html https://www.suse.com/security/cve/CVE-2019-2526.html https://www.suse.com/security/cve/CVE-2019-2527.html https://www.suse.com/security/cve/CVE-2019-2548.html https://www.suse.com/security/cve/CVE-2019-2552.html https://www.suse.com/security/cve/CVE-2019-2553.html https://www.suse.com/security/cve/CVE-2019-2554.html https://www.suse.com/security/cve/CVE-2019-2555.html https://www.suse.com/security/cve/CVE-2019-2556.html https://bugzilla.suse.com/1122212

1 0

openSUSE-RU-2019:1539-1: moderate: Recommended update for lua-lua-mpris
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for lua-lua-mpris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1539-1 Rating: moderate References: #1136883 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua-lua-mpris fixes the following issues: * Fix crash when media file doesn't have utf8 encoded metadata (boo#1136883) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1539=1 Package List: - openSUSE Leap 15.1 (x86_64): lua51-lua-mpris-0.0+git20170918.28b1c75-lp151.5.5.1 lua53-lua-mpris-0.0+git20170918.28b1c75-lp151.5.5.1 mpv-plugin-mpris-0.0+git20170918.28b1c75-lp151.5.5.1 References: https://bugzilla.suse.com/1136883

1 0

openSUSE-RU-2019:1545-1: moderate: Recommended update for lua-lua-mpris
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for lua-lua-mpris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1545-1 Rating: moderate References: #1136883 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua-lua-mpris fixes the following issues: * Fix crash when media file doesn't have utf8 encoded metadata (boo#1136883) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1545=1 Package List: - openSUSE Leap 15.0 (x86_64): lua51-lua-mpris-0.0+git20170918.28b1c75-lp150.4.5.1 lua53-lua-mpris-0.0+git20170918.28b1c75-lp150.4.5.1 mpv-plugin-mpris-0.0+git20170918.28b1c75-lp150.4.5.1 References: https://bugzilla.suse.com/1136883

1 0

openSUSE-RU-2019:1542-1: moderate: Recommended update for wireless-regdb
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for wireless-regdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1542-1 Rating: moderate References: #1134213 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wireless-regdb provides the following fixes: Update to version 2019.03.01: (bsc#1134213) * Sync IN with G.S.R. 1048(E). * Update regulatory rules for Sweden (SE) on 2.4/5/60 GHz. * Update 60ghz band rules for US. * Add 5725-5875 MHz rule for Portugal (PT). * Add URLs in README. * Delete outdated comment for DE. * Update source of info for CU and ES. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1542=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1542=1 Package List: - openSUSE Leap 15.1 (noarch): wireless-regdb-2019.03.01-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): wireless-regdb-2019.03.01-lp150.2.13.1 References: https://bugzilla.suse.com/1134213

1 0

openSUSE-RU-2019:1543-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1543-1 Rating: moderate References: #1105692 #1129012 #1131588 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2-network provides the following fixes: - Display a confirmation popup when the static route is going to be removed after switching a device to DHCP. (bsc#1131588) - autoyast: Use the bus_id of the udev parent device when using virtio netcards and matching the existent rules with the ones defined in the profile. (bsc#1129012) - Showing correct start mode for nfsroot device. (bsc#1105692) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1543=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-network-4.0.48-lp150.2.16.1 References: https://bugzilla.suse.com/1105692 https://bugzilla.suse.com/1129012 https://bugzilla.suse.com/1131588

1 0

openSUSE-RU-2019:1544-1: moderate: Recommended update for fping
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for fping ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1544-1 Rating: moderate References: #1133988 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fping fixes the following issues: - Fix fping on servers with disabled IPv6 [bsc#1133988] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1544=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1544=1 Package List: - openSUSE Leap 15.1 (x86_64): fping-4.0-lp151.4.3.1 fping-debuginfo-4.0-lp151.4.3.1 fping-debugsource-4.0-lp151.4.3.1 - openSUSE Leap 15.0 (x86_64): fping-4.0-lp150.3.3.1 fping-debuginfo-4.0-lp150.3.3.1 fping-debugsource-4.0-lp150.3.3.1 References: https://bugzilla.suse.com/1133988

1 0

openSUSE-RU-2019:1546-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1546-1 Rating: moderate References: #1128392 #1134179 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for google-compute-engine fixes the following issues: google-compute-engine was updated to version 20190416 (bsc#1128392, bsc#1134179): - Google Compute Engine OS Login * Fix pam_group ordering detection. * Restart cron from the OS Login control file. * Add PAM entry to su:account stack. Update to version 20190315: - Google Compute Engine OS Login * Fix alternate challenge section for two factor authentication. Update to version 20190304: - Google Compute Engine * Set oom_score_adjust for google_accounts_daemon. - Google Compute Engine OS Login * Use pam_group to provide users with default groups. * Add compat.h to support FreeBSD. * Exit immediately after a two factor authentication failure. * Add support for Google phone prompt challenges. - Include systemd service file to run google_optimize_local_ssd command - Include systemd service file to run google_set_multiqueue command - Install journald configuration files into /usr/lib/systemd/journald.conf.d This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1546=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1546=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190416-lp151.2.3.1 google-compute-engine-oslogin-20190416-lp151.2.3.1 google-compute-engine-oslogin-debuginfo-20190416-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190416-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190416-lp151.2.3.1 google-compute-engine-oslogin-32bit-debuginfo-20190416-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190416-lp150.2.19.1 - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190416-lp150.2.19.1 google-compute-engine-oslogin-20190416-lp150.2.19.1 google-compute-engine-oslogin-debuginfo-20190416-lp150.2.19.1 References: https://bugzilla.suse.com/1128392 https://bugzilla.suse.com/1134179

1 0

openSUSE-RU-2019:1538-1: moderate: Recommended update for mailgraph
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for mailgraph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1538-1 Rating: moderate References: #1069468 #1116020 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for mailgraph fixes the following issues: - Stop requesting an image from http://oss.oetiker.ch every time the mailgraph.cgi is opened - add support (graphs) to postgrey and greylisting - handle postscreen in the same way as smtpd - added mailgraph.service file -> use systemd (boo#1116020) * add systemd support * add file mailgraph.service * set defaults in sysconfig file - add support for rsyslog Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1538=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1538=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1538=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1538=1 Package List: - openSUSE Leap 42.3 (noarch): mailgraph-1.14-2.3.1 - openSUSE Leap 15.1 (noarch): mailgraph-1.14-lp151.3.3.1 - openSUSE Leap 15.0 (noarch): mailgraph-1.14-lp150.2.3.1 - openSUSE Backports SLE-15 (noarch): mailgraph-1.14-bp150.3.3.1 References: https://bugzilla.suse.com/1069468 https://bugzilla.suse.com/1116020

1 0

openSUSE-RU-2019:1541-1: moderate: Recommended update for wireless-regdb
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for wireless-regdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1541-1 Rating: moderate References: #1134213 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wireless-regdb provides the following fixes: Update to version 2019.03.01: (bsc#1134213) * Sync IN with G.S.R. 1048(E). * Update regulatory rules for Sweden (SE) on 2.4/5/60 GHz. * Update 60ghz band rules for US. * Add 5725-5875 MHz rule for Portugal (PT). * Add URLs in README. * Delete outdated comment for DE. * Update source of info for CU and ES. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1541=1 Package List: - openSUSE Leap 42.3 (noarch): wireless-regdb-2019.03.01-5.16.1 References: https://bugzilla.suse.com/1134213

1 0

openSUSE-RU-2019:1537-1: moderate: Recommended update for yubioath-desktop
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for yubioath-desktop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1537-1 Rating: moderate References: #1137070 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yubioath-desktop fixes the following issues: - Version 4.3.6 (released 2019-05-29) (boo#1137070) - Windows: improve support for YubiKey NEO on Windows 10 - Version 4.3.5 (released 2019-01-02) - Bugfix: Show correct message when YubiKey doesn’t have the correct transport enabled - Improve error handling in Slot Mode - Linux: Add experimental support for .AppImage - Version 4.3.4 (released 2018-05-07) - Support YubiKey Preview - Add credential: allow space in secret key. - Bugfix: Don’t show "No credentials found..." incorrectly. - Bugfix: Forget the password when removing the device. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1537=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1537=1 Package List: - openSUSE Leap 15.1 (x86_64): yubioath-desktop-4.3.6-lp151.3.3.1 yubioath-desktop-debuginfo-4.3.6-lp151.3.3.1 yubioath-desktop-debugsource-4.3.6-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): yubioath-desktop-4.3.6-lp150.2.3.1 yubioath-desktop-debuginfo-4.3.6-lp150.2.3.1 yubioath-desktop-debugsource-4.3.6-lp150.2.3.1 References: https://bugzilla.suse.com/1137070

1 0

openSUSE-RU-2019:1540-1: moderate: Recommended update for nim
by maintenance＠opensuse.org 11 Jun '19

11 Jun '19

openSUSE Recommended Update: Recommended update for nim ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1540-1 Rating: moderate References: #1137006 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nim fixes the following issues: - Fixed location of config files (boo#1137006) Update to version 0.19.6: * Please see: https://nim-lang.org/blog/2019/05/13/version-0196-released.html Update to version 0.19.2: * Please see: https://nim-lang.org/blog/2018/12/31/version-0192-released.html Update to version 0.19.0: * Please see: https://nim-lang.org/blog/2018/09/26/version-0190-released.html Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1540=1 - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1540=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1540=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1540=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nim-0.19.6-2.3.1 nim-debuginfo-0.19.6-2.3.1 - openSUSE Leap 15.1 (x86_64): nim-0.19.6-lp151.3.3.1 nim-debuginfo-0.19.6-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): nim-0.19.6-lp150.2.3.1 nim-debuginfo-0.19.6-lp150.2.3.1 - openSUSE Backports SLE-15 (x86_64): nim-0.19.6-bp150.3.3.1 References: https://bugzilla.suse.com/1137006

1 0

openSUSE-SU-2019:1534-1: important: Security update for MozillaFirefox
by opensuse-security＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Security Update: Security update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1534-1 Rating: important References: #1135824 Cross-References: CVE-2018-18511 CVE-2019-11691 CVE-2019-11692 CVE-2019-11693 CVE-2019-11694 CVE-2019-11698 CVE-2019-5798 CVE-2019-7317 CVE-2019-9797 CVE-2019-9800 CVE-2019-9815 CVE-2019-9816 CVE-2019-9817 CVE-2019-9818 CVE-2019-9819 CVE-2019-9820 CVE-2019-9821 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 17 vulnerabilities is now available. Description: This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14): * CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext * CVE-2019-11691: Use-after-free in XMLHttpRequest * CVE-2019-11692: Use-after-free removing listeners in the event listener manager * CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux * CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox * CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks * CVE-2019-5798: Out-of-bounds read in Skia * CVE-2019-7317: Use-after-free in png_image_free of libpng library * CVE-2019-9797: Cross-origin theft of images with createImageBitmap * CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7 * CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS * CVE-2019-9816: Type confusion with object groups and UnboxedObjects * CVE-2019-9817: Stealing of cross-domain images using canvas * CVE-2019-9818: (Windows only) Use-after-free in crash generation server * CVE-2019-9819: Compartment mismatch with fetch API * CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell * CVE-2019-9821: Use-after-free in AssertWorkerThread Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1534=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1534=1 Package List: - openSUSE Leap 42.3 (x86_64): MozillaFirefox-60.7.0-145.2 MozillaFirefox-branding-upstream-60.7.0-145.2 MozillaFirefox-buildsymbols-60.7.0-145.2 MozillaFirefox-debuginfo-60.7.0-145.2 MozillaFirefox-debugsource-60.7.0-145.2 MozillaFirefox-devel-60.7.0-145.2 MozillaFirefox-translations-common-60.7.0-145.2 MozillaFirefox-translations-other-60.7.0-145.2 - openSUSE Leap 15.0 (x86_64): MozillaFirefox-60.7.0-lp150.3.54.5 MozillaFirefox-branding-upstream-60.7.0-lp150.3.54.5 MozillaFirefox-buildsymbols-60.7.0-lp150.3.54.5 MozillaFirefox-debuginfo-60.7.0-lp150.3.54.5 MozillaFirefox-debugsource-60.7.0-lp150.3.54.5 MozillaFirefox-devel-60.7.0-lp150.3.54.5 MozillaFirefox-translations-common-60.7.0-lp150.3.54.5 MozillaFirefox-translations-other-60.7.0-lp150.3.54.5 References: https://www.suse.com/security/cve/CVE-2018-18511.html https://www.suse.com/security/cve/CVE-2019-11691.html https://www.suse.com/security/cve/CVE-2019-11692.html https://www.suse.com/security/cve/CVE-2019-11693.html https://www.suse.com/security/cve/CVE-2019-11694.html https://www.suse.com/security/cve/CVE-2019-11698.html https://www.suse.com/security/cve/CVE-2019-5798.html https://www.suse.com/security/cve/CVE-2019-7317.html https://www.suse.com/security/cve/CVE-2019-9797.html https://www.suse.com/security/cve/CVE-2019-9800.html https://www.suse.com/security/cve/CVE-2019-9815.html https://www.suse.com/security/cve/CVE-2019-9816.html https://www.suse.com/security/cve/CVE-2019-9817.html https://www.suse.com/security/cve/CVE-2019-9818.html https://www.suse.com/security/cve/CVE-2019-9819.html https://www.suse.com/security/cve/CVE-2019-9820.html https://www.suse.com/security/cve/CVE-2019-9821.html https://bugzilla.suse.com/1135824

1 0

openSUSE-SU-2019:1535-1: moderate: Security update for bubblewrap
by opensuse-security＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Security Update: Security update for bubblewrap ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1535-1 Rating: moderate References: #1136958 Cross-References: CVE-2019-12439 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bubblewrap to version 0.3.3 fixes the following issue: Security issue fixed: - CVE-2019-12439: Fixed a temporary directory misuse as mount point which could have allowed local user to prevent others from running bubblewrap. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1535=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bubblewrap-0.3.3-lp151.2.3.1 bubblewrap-debuginfo-0.3.3-lp151.2.3.1 bubblewrap-debugsource-0.3.3-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-12439.html https://bugzilla.suse.com/1136958

1 0

openSUSE-SU-2019:1533-1: important: Security update for bind
by opensuse-security＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1533-1 Rating: important References: #1104129 #1126068 #1126069 #1133185 Cross-References: CVE-2018-5740 CVE-2018-5743 CVE-2018-5745 CVE-2019-6465 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for bind fixes the following issues: Security issues fixed: - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069). - CVE-2018-5745: Fixed a denial of service vulnerability if a trust anchor rolls over to an unsupported key algorithm when using managed-keys (bsc#1126068). - CVE-2018-5743: Fixed a denial of service vulnerability which could be caused by to many simultaneous TCP connections (bsc#1133185). - CVE-2018-5740: Fixed a denial of service vulnerability in the "deny-answer-aliases" feature (bsc#1104129). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1533=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1533=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): bind-9.11.2-lp151.11.3.1 bind-chrootenv-9.11.2-lp151.11.3.1 bind-debuginfo-9.11.2-lp151.11.3.1 bind-debugsource-9.11.2-lp151.11.3.1 bind-devel-9.11.2-lp151.11.3.1 bind-lwresd-9.11.2-lp151.11.3.1 bind-lwresd-debuginfo-9.11.2-lp151.11.3.1 bind-utils-9.11.2-lp151.11.3.1 bind-utils-debuginfo-9.11.2-lp151.11.3.1 libbind9-160-9.11.2-lp151.11.3.1 libbind9-160-debuginfo-9.11.2-lp151.11.3.1 libdns169-9.11.2-lp151.11.3.1 libdns169-debuginfo-9.11.2-lp151.11.3.1 libirs-devel-9.11.2-lp151.11.3.1 libirs160-9.11.2-lp151.11.3.1 libirs160-debuginfo-9.11.2-lp151.11.3.1 libisc166-9.11.2-lp151.11.3.1 libisc166-debuginfo-9.11.2-lp151.11.3.1 libisccc160-9.11.2-lp151.11.3.1 libisccc160-debuginfo-9.11.2-lp151.11.3.1 libisccfg160-9.11.2-lp151.11.3.1 libisccfg160-debuginfo-9.11.2-lp151.11.3.1 liblwres160-9.11.2-lp151.11.3.1 liblwres160-debuginfo-9.11.2-lp151.11.3.1 - openSUSE Leap 15.1 (x86_64): bind-devel-32bit-9.11.2-lp151.11.3.1 libbind9-160-32bit-9.11.2-lp151.11.3.1 libbind9-160-32bit-debuginfo-9.11.2-lp151.11.3.1 libdns169-32bit-9.11.2-lp151.11.3.1 libdns169-32bit-debuginfo-9.11.2-lp151.11.3.1 libirs160-32bit-9.11.2-lp151.11.3.1 libirs160-32bit-debuginfo-9.11.2-lp151.11.3.1 libisc166-32bit-9.11.2-lp151.11.3.1 libisc166-32bit-debuginfo-9.11.2-lp151.11.3.1 libisccc160-32bit-9.11.2-lp151.11.3.1 libisccc160-32bit-debuginfo-9.11.2-lp151.11.3.1 libisccfg160-32bit-9.11.2-lp151.11.3.1 libisccfg160-32bit-debuginfo-9.11.2-lp151.11.3.1 liblwres160-32bit-9.11.2-lp151.11.3.1 liblwres160-32bit-debuginfo-9.11.2-lp151.11.3.1 - openSUSE Leap 15.1 (noarch): bind-doc-9.11.2-lp151.11.3.1 python3-bind-9.11.2-lp151.11.3.1 - openSUSE Leap 15.0 (i586 x86_64): bind-9.11.2-lp150.8.13.1 bind-chrootenv-9.11.2-lp150.8.13.1 bind-debuginfo-9.11.2-lp150.8.13.1 bind-debugsource-9.11.2-lp150.8.13.1 bind-devel-9.11.2-lp150.8.13.1 bind-lwresd-9.11.2-lp150.8.13.1 bind-lwresd-debuginfo-9.11.2-lp150.8.13.1 bind-utils-9.11.2-lp150.8.13.1 bind-utils-debuginfo-9.11.2-lp150.8.13.1 libbind9-160-9.11.2-lp150.8.13.1 libbind9-160-debuginfo-9.11.2-lp150.8.13.1 libdns169-9.11.2-lp150.8.13.1 libdns169-debuginfo-9.11.2-lp150.8.13.1 libirs-devel-9.11.2-lp150.8.13.1 libirs160-9.11.2-lp150.8.13.1 libirs160-debuginfo-9.11.2-lp150.8.13.1 libisc166-9.11.2-lp150.8.13.1 libisc166-debuginfo-9.11.2-lp150.8.13.1 libisccc160-9.11.2-lp150.8.13.1 libisccc160-debuginfo-9.11.2-lp150.8.13.1 libisccfg160-9.11.2-lp150.8.13.1 libisccfg160-debuginfo-9.11.2-lp150.8.13.1 liblwres160-9.11.2-lp150.8.13.1 liblwres160-debuginfo-9.11.2-lp150.8.13.1 - openSUSE Leap 15.0 (noarch): bind-doc-9.11.2-lp150.8.13.1 python3-bind-9.11.2-lp150.8.13.1 - openSUSE Leap 15.0 (x86_64): bind-devel-32bit-9.11.2-lp150.8.13.1 libbind9-160-32bit-9.11.2-lp150.8.13.1 libbind9-160-32bit-debuginfo-9.11.2-lp150.8.13.1 libdns169-32bit-9.11.2-lp150.8.13.1 libdns169-32bit-debuginfo-9.11.2-lp150.8.13.1 libirs160-32bit-9.11.2-lp150.8.13.1 libirs160-32bit-debuginfo-9.11.2-lp150.8.13.1 libisc166-32bit-9.11.2-lp150.8.13.1 libisc166-32bit-debuginfo-9.11.2-lp150.8.13.1 libisccc160-32bit-9.11.2-lp150.8.13.1 libisccc160-32bit-debuginfo-9.11.2-lp150.8.13.1 libisccfg160-32bit-9.11.2-lp150.8.13.1 libisccfg160-32bit-debuginfo-9.11.2-lp150.8.13.1 liblwres160-32bit-9.11.2-lp150.8.13.1 liblwres160-32bit-debuginfo-9.11.2-lp150.8.13.1 References: https://www.suse.com/security/cve/CVE-2018-5740.html https://www.suse.com/security/cve/CVE-2018-5743.html https://www.suse.com/security/cve/CVE-2018-5745.html https://www.suse.com/security/cve/CVE-2019-6465.html https://bugzilla.suse.com/1104129 https://bugzilla.suse.com/1126068 https://bugzilla.suse.com/1126069 https://bugzilla.suse.com/1133185

1 0

openSUSE-SU-2019:1532-1: important: Security update for bind
by opensuse-security＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1532-1 Rating: important References: #1104129 #1126068 #1126069 #1133185 Cross-References: CVE-2018-5740 CVE-2018-5743 CVE-2018-5745 CVE-2019-6465 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for bind fixes the following issues: Security issues fixed: - CVE-2018-5740: Fixed a denial of service vulnerability in the "deny-answer-aliases" feature (bsc#1104129). - CVE-2019-6465: Fixed an issue where controls for zone transfers may not be properly applied to Dynamically Loadable Zones (bsc#1126069). - CVE-2018-5745: An assertion failure can occur if a trust anchor rolls over to an unsupported key algorithm when using managed-keys. (bsc#1126068) - CVE-2018-5743: Limiting simultaneous TCP clients is ineffective. (bsc#1133185) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1532=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): bind-9.9.9P1-56.1 bind-chrootenv-9.9.9P1-56.1 bind-debuginfo-9.9.9P1-56.1 bind-debugsource-9.9.9P1-56.1 bind-devel-9.9.9P1-56.1 bind-libs-9.9.9P1-56.1 bind-libs-debuginfo-9.9.9P1-56.1 bind-lwresd-9.9.9P1-56.1 bind-lwresd-debuginfo-9.9.9P1-56.1 bind-utils-9.9.9P1-56.1 bind-utils-debuginfo-9.9.9P1-56.1 - openSUSE Leap 42.3 (x86_64): bind-libs-32bit-9.9.9P1-56.1 bind-libs-debuginfo-32bit-9.9.9P1-56.1 - openSUSE Leap 42.3 (noarch): bind-doc-9.9.9P1-56.1 References: https://www.suse.com/security/cve/CVE-2018-5740.html https://www.suse.com/security/cve/CVE-2018-5743.html https://www.suse.com/security/cve/CVE-2018-5745.html https://www.suse.com/security/cve/CVE-2019-6465.html https://bugzilla.suse.com/1104129 https://bugzilla.suse.com/1126068 https://bugzilla.suse.com/1126069 https://bugzilla.suse.com/1133185

1 0

openSUSE-RU-2019:1536-1: moderate: Recommended update for kmod
by maintenance＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Recommended Update: Recommended update for kmod ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1536-1 Rating: moderate References: #1097869 #1118629 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kmod fixes the following issues: - Fixes a potential buffer overflow in libkmod (bsc#1118629). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1536=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): kmod-17-19.1 kmod-compat-17-19.1 kmod-debuginfo-17-19.1 kmod-debugsource-17-19.1 libkmod-devel-17-19.1 libkmod2-17-19.1 libkmod2-debuginfo-17-19.1 References: https://bugzilla.suse.com/1097869 https://bugzilla.suse.com/1118629

1 0

openSUSE-RU-2019:1531-1: important: Recommended update for MozillaFirefox
by maintenance＠opensuse.org 10 Jun '19

10 Jun '19

openSUSE Recommended Update: Recommended update for MozillaFirefox ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1531-1 Rating: important References: #1130694 #1134126 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for MozillaFirefox fixes the following issues: MozillaFirefox was updated to 60.6.3 (bsc#1134126) * Further improvements to re-enable web extensions which had been disabled for users with a master password set. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1531=1 Package List: - openSUSE Leap 15.1 (x86_64): MozillaFirefox-60.6.3-lp151.2.3.6 MozillaFirefox-branding-upstream-60.6.3-lp151.2.3.6 MozillaFirefox-buildsymbols-60.6.3-lp151.2.3.6 MozillaFirefox-debuginfo-60.6.3-lp151.2.3.6 MozillaFirefox-debugsource-60.6.3-lp151.2.3.6 MozillaFirefox-devel-60.6.3-lp151.2.3.6 MozillaFirefox-translations-common-60.6.3-lp151.2.3.6 MozillaFirefox-translations-other-60.6.3-lp151.2.3.6 References: https://bugzilla.suse.com/1130694 https://bugzilla.suse.com/1134126

1 0