June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1654-1: moderate: Recommended update for xfsprogs
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for xfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1654-1 Rating: moderate References: #1073421 #1122271 #1129859 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for xfsprogs fixes the following issues: - xfs_repair: will now allow '/' in attribute names (bsc#1122271) - xfs_repair: will now allow zeroing of corrupt log (bsc#1073421) - enabdled offline (unmounted) filesystem geometry queries (bsc#1129859) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1654=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1654=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): xfsprogs-4.15.0-lp151.7.3.1 xfsprogs-debuginfo-4.15.0-lp151.7.3.1 xfsprogs-debugsource-4.15.0-lp151.7.3.1 xfsprogs-devel-4.15.0-lp151.7.3.1 - openSUSE Leap 15.0 (i586 x86_64): xfsprogs-4.15.0-lp150.3.11.1 xfsprogs-debuginfo-4.15.0-lp150.3.11.1 xfsprogs-debugsource-4.15.0-lp150.3.11.1 xfsprogs-devel-4.15.0-lp150.3.11.1 References: https://bugzilla.suse.com/1073421 https://bugzilla.suse.com/1122271 https://bugzilla.suse.com/1129859

1 0

openSUSE-SU-2019:1650-1: important: Security update for glib2
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for glib2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1650-1 Rating: important References: #1103678 #1137001 Cross-References: CVE-2019-12450 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for glib2 fixes the following issues: Security issue fixed: - CVE-2019-12450: Fixed an improper file permission when copy operation takes place (bsc#1137001). Other issue addressed: - glib2 was handling an UNKNOWN connectivity state from NetworkManager as if there was a connection thus giving false positives to PackageKit (bsc#1103678) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1650=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): glib2-debugsource-2.54.3-lp150.3.10.1 glib2-devel-2.54.3-lp150.3.10.1 glib2-devel-debuginfo-2.54.3-lp150.3.10.1 glib2-devel-static-2.54.3-lp150.3.10.1 glib2-tools-2.54.3-lp150.3.10.1 glib2-tools-debuginfo-2.54.3-lp150.3.10.1 libgio-2_0-0-2.54.3-lp150.3.10.1 libgio-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgio-fam-2.54.3-lp150.3.10.1 libgio-fam-debuginfo-2.54.3-lp150.3.10.1 libglib-2_0-0-2.54.3-lp150.3.10.1 libglib-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgmodule-2_0-0-2.54.3-lp150.3.10.1 libgmodule-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgobject-2_0-0-2.54.3-lp150.3.10.1 libgobject-2_0-0-debuginfo-2.54.3-lp150.3.10.1 libgthread-2_0-0-2.54.3-lp150.3.10.1 libgthread-2_0-0-debuginfo-2.54.3-lp150.3.10.1 - openSUSE Leap 15.0 (noarch): gio-branding-upstream-2.54.3-lp150.3.10.1 glib2-lang-2.54.3-lp150.3.10.1 - openSUSE Leap 15.0 (x86_64): glib2-devel-32bit-2.54.3-lp150.3.10.1 glib2-devel-32bit-debuginfo-2.54.3-lp150.3.10.1 glib2-tools-32bit-2.54.3-lp150.3.10.1 glib2-tools-32bit-debuginfo-2.54.3-lp150.3.10.1 libgio-2_0-0-32bit-2.54.3-lp150.3.10.1 libgio-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgio-fam-32bit-2.54.3-lp150.3.10.1 libgio-fam-32bit-debuginfo-2.54.3-lp150.3.10.1 libglib-2_0-0-32bit-2.54.3-lp150.3.10.1 libglib-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgmodule-2_0-0-32bit-2.54.3-lp150.3.10.1 libgmodule-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgobject-2_0-0-32bit-2.54.3-lp150.3.10.1 libgobject-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 libgthread-2_0-0-32bit-2.54.3-lp150.3.10.1 libgthread-2_0-0-32bit-debuginfo-2.54.3-lp150.3.10.1 References: https://www.suse.com/security/cve/CVE-2019-12450.html https://bugzilla.suse.com/1103678 https://bugzilla.suse.com/1137001

1 0

openSUSE-SU-2019:1649-1: moderate: Security update for exempi
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for exempi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1649-1 Rating: moderate References: #1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1649=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): exempi-debugsource-2.4.5-lp150.2.3.1 exempi-tools-2.4.5-lp150.2.3.1 exempi-tools-debuginfo-2.4.5-lp150.2.3.1 libexempi-devel-2.4.5-lp150.2.3.1 libexempi3-2.4.5-lp150.2.3.1 libexempi3-debuginfo-2.4.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libexempi3-32bit-2.4.5-lp150.2.3.1 libexempi3-32bit-debuginfo-2.4.5-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2018-12648.html https://bugzilla.suse.com/1098946

1 0

openSUSE-RU-2019:1656-1: Recommended update for apache2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1656-1 Rating: low References: #1134294 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - Reinstate apache-22-24-upgrade migration script to enable smooth update from Apache 2.2 to 2.4 [bsc#1134294] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1656=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-2.4.33-lp151.8.3.1 apache2-debuginfo-2.4.33-lp151.8.3.1 apache2-debugsource-2.4.33-lp151.8.3.1 apache2-devel-2.4.33-lp151.8.3.1 apache2-event-2.4.33-lp151.8.3.1 apache2-event-debuginfo-2.4.33-lp151.8.3.1 apache2-example-pages-2.4.33-lp151.8.3.1 apache2-prefork-2.4.33-lp151.8.3.1 apache2-prefork-debuginfo-2.4.33-lp151.8.3.1 apache2-utils-2.4.33-lp151.8.3.1 apache2-utils-debuginfo-2.4.33-lp151.8.3.1 apache2-worker-2.4.33-lp151.8.3.1 apache2-worker-debuginfo-2.4.33-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): apache2-doc-2.4.33-lp151.8.3.1 References: https://bugzilla.suse.com/1134294

1 0

openSUSE-RU-2019:1652-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1652-1 Rating: moderate References: #1137038 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for resource-agents provides the following fixes: - Change message log level for the non action messages. The messages can still be seen using the verbose parameter. (bsc#1137038) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1652=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ldirectord-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-debuginfo-4.1.1+git0.5a1edf2b-lp150.2.16.1 resource-agents-debugsource-4.1.1+git0.5a1edf2b-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): monitoring-plugins-metadata-4.1.1+git0.5a1edf2b-lp150.2.16.1 References: https://bugzilla.suse.com/1137038

1 0

openSUSE-RU-2019:1642-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1642-1 Rating: moderate References: #1137038 #1137231 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fixes a byte conversion error (bsc#1137038, bsc#1137231) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1642=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): ldirectord-4.0.1+git.1495055229.643177f1-24.1 resource-agents-4.0.1+git.1495055229.643177f1-24.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-24.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-24.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-24.1 References: https://bugzilla.suse.com/1137038 https://bugzilla.suse.com/1137231

1 0

openSUSE-SU-2019:1645-1: important: Security update for sqlite3
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1645-1 Rating: important References: #1136976 Cross-References: CVE-2019-8457 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: Security issue fixed: - CVE-2019-8457: Fixed a Heap out-of-bound read in rtreenode() when handling invalid rtree tables (bsc#1136976). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1645=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsqlite3-0-3.8.10.2-11.10.1 libsqlite3-0-debuginfo-3.8.10.2-11.10.1 sqlite3-3.8.10.2-11.10.1 sqlite3-debuginfo-3.8.10.2-11.10.1 sqlite3-debugsource-3.8.10.2-11.10.1 sqlite3-devel-3.8.10.2-11.10.1 - openSUSE Leap 42.3 (x86_64): libsqlite3-0-32bit-3.8.10.2-11.10.1 libsqlite3-0-debuginfo-32bit-3.8.10.2-11.10.1 - openSUSE Leap 42.3 (noarch): sqlite3-doc-3.8.10.2-11.10.1 References: https://www.suse.com/security/cve/CVE-2019-8457.html https://bugzilla.suse.com/1136976

1 0

openSUSE-RU-2019:1653-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1653-1 Rating: moderate References: #1134659 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - Change rpcbind locking path from /var/run/rpcbind.lock to /run/rpcbind.lock. (bsc#1134659) - Change the order of socket/service in the %postun scriptlet to avoid an error from rpcbind.socket when rpcbind is running during package update. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1653=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1653=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): rpcbind-0.2.3-lp151.5.3.1 rpcbind-debuginfo-0.2.3-lp151.5.3.1 rpcbind-debugsource-0.2.3-lp151.5.3.1 - openSUSE Leap 15.0 (i586 x86_64): rpcbind-0.2.3-lp150.8.1 rpcbind-debuginfo-0.2.3-lp150.8.1 rpcbind-debugsource-0.2.3-lp150.8.1 References: https://bugzilla.suse.com/1134659

1 0

openSUSE-RU-2019:1655-1: Recommended update for xz
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for xz ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1655-1 Rating: low References: #1135709 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xz fixes the following issues: Add SUSE-Public-Domain license as some parts of xz utils (liblzma, xz, xzdec, lzmadec, documentation, translated messages, tests, debug, extra directory) are in public domain licence [bsc#1135709] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1655=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1655=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): liblzma5-5.2.3-lp151.4.3.1 liblzma5-debuginfo-5.2.3-lp151.4.3.1 xz-5.2.3-lp151.4.3.1 xz-debuginfo-5.2.3-lp151.4.3.1 xz-debugsource-5.2.3-lp151.4.3.1 xz-devel-5.2.3-lp151.4.3.1 xz-static-devel-5.2.3-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): xz-lang-5.2.3-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): liblzma5-32bit-5.2.3-lp151.4.3.1 liblzma5-32bit-debuginfo-5.2.3-lp151.4.3.1 xz-devel-32bit-5.2.3-lp151.4.3.1 - openSUSE Leap 15.0 (i586 x86_64): liblzma5-5.2.3-lp150.3.3.1 liblzma5-debuginfo-5.2.3-lp150.3.3.1 xz-5.2.3-lp150.3.3.1 xz-debuginfo-5.2.3-lp150.3.3.1 xz-debugsource-5.2.3-lp150.3.3.1 xz-devel-5.2.3-lp150.3.3.1 xz-static-devel-5.2.3-lp150.3.3.1 - openSUSE Leap 15.0 (noarch): xz-lang-5.2.3-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): liblzma5-32bit-5.2.3-lp150.3.3.1 liblzma5-32bit-debuginfo-5.2.3-lp150.3.3.1 xz-devel-32bit-5.2.3-lp150.3.3.1 References: https://bugzilla.suse.com/1135709

1 0

openSUSE-RU-2019:1631-1: moderate: Recommended update for kernel-firmware
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1631-1 Rating: moderate References: #1132303 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware fixes the following issues: kernel firmware was updated to version 20190312: * drm/amdgpu: update picasso to latest from 18.50 branch * drm/amdgpu: update polaris12 to latest from 18.50 branch * drm/amdgpu: update vega20 to latest from 18.50 branch * rtw88: RTL8822C: update rtw8822c_fw.bin to v5.0 * rtl_bt: Update firmware for BT part of RTL8822C * linux-firmware: update Marvell 8787/8801/8887 firmware images * linux-firmware: update Marvell 8897/8997 firmware images * nfp: update Agilio SmartNIC firmware to rev 2.1.16.1 * QCA: Add the fw files for BT Chip QCA6174. The update to version 20190221 contained: * linux-firmware: Add AMD SEV firmware * WHENCE: Correct errant entries * amdgpu: update raven2 rlc firmware * amdgpu: drop raven2_sdma1.bin * linux-firmware: Update firmware file for Intel Bluetooth,9560 * linux-firmware: Update firmware file for Intel Bluetooth,9260 * qca: Add firmware files for BT chip wcn3990. * nvidia: add TU10x typec controller firmware The update to version 20190212 contained: * bnx2x: Add FW 7.13.11.0. (bsc#1132303) * amdgpu: add firmware for vega20 from 18.50 * amdgpu: bump year on license * linux-firmware: update Marvell PCIe-USB8997 firmware image * linux-firmware: update Marvell SD8897-B0 firmware image * linux-firmware: add Marvell SD8977 firmware image * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00021 * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00043 * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00024 * ath10k: QCA6174 hw3.0: update board-2.bin This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1631=1 Package List: - openSUSE Leap 15.1 (noarch): kernel-firmware-20190312-lp151.2.3.1 ucode-amd-20190312-lp151.2.3.1 References: https://bugzilla.suse.com/1132303

1 0