June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1643-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1643-1 Rating: moderate References: #1133847 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog fixes the following issues: - Fixes an issue where the 'readTimeout' option couldn't be used while using imfile with polling mode(bsc#1133847) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1643=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rsyslog-8.24.0-2.16.1 rsyslog-debuginfo-8.24.0-2.16.1 rsyslog-debugsource-8.24.0-2.16.1 rsyslog-diag-tools-8.24.0-2.16.1 rsyslog-diag-tools-debuginfo-8.24.0-2.16.1 rsyslog-doc-8.24.0-2.16.1 rsyslog-module-dbi-8.24.0-2.16.1 rsyslog-module-dbi-debuginfo-8.24.0-2.16.1 rsyslog-module-elasticsearch-8.24.0-2.16.1 rsyslog-module-elasticsearch-debuginfo-8.24.0-2.16.1 rsyslog-module-gcrypt-8.24.0-2.16.1 rsyslog-module-gcrypt-debuginfo-8.24.0-2.16.1 rsyslog-module-gssapi-8.24.0-2.16.1 rsyslog-module-gssapi-debuginfo-8.24.0-2.16.1 rsyslog-module-gtls-8.24.0-2.16.1 rsyslog-module-gtls-debuginfo-8.24.0-2.16.1 rsyslog-module-guardtime-8.24.0-2.16.1 rsyslog-module-guardtime-debuginfo-8.24.0-2.16.1 rsyslog-module-mmnormalize-8.24.0-2.16.1 rsyslog-module-mmnormalize-debuginfo-8.24.0-2.16.1 rsyslog-module-mysql-8.24.0-2.16.1 rsyslog-module-mysql-debuginfo-8.24.0-2.16.1 rsyslog-module-omamqp1-8.24.0-2.16.1 rsyslog-module-omamqp1-debuginfo-8.24.0-2.16.1 rsyslog-module-omhttpfs-8.24.0-2.16.1 rsyslog-module-omhttpfs-debuginfo-8.24.0-2.16.1 rsyslog-module-omtcl-8.24.0-2.16.1 rsyslog-module-omtcl-debuginfo-8.24.0-2.16.1 rsyslog-module-pgsql-8.24.0-2.16.1 rsyslog-module-pgsql-debuginfo-8.24.0-2.16.1 rsyslog-module-relp-8.24.0-2.16.1 rsyslog-module-relp-debuginfo-8.24.0-2.16.1 rsyslog-module-snmp-8.24.0-2.16.1 rsyslog-module-snmp-debuginfo-8.24.0-2.16.1 rsyslog-module-udpspoof-8.24.0-2.16.1 rsyslog-module-udpspoof-debuginfo-8.24.0-2.16.1 References: https://bugzilla.suse.com/1133847

1 0

openSUSE-RU-2019:1651-1: moderate: Recommended update for python-kiwi
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for python-kiwi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1651-1 Rating: moderate References: #1128146 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-kiwi fixes the following issues: - Update compression flag for qcow2 format. (bsc#1128146) - Refactoring for the evaluation of the compress flag in the runtime config. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1651=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): dracut-kiwi-lib-9.17.15-lp150.2.20.1 dracut-kiwi-live-9.17.15-lp150.2.20.1 dracut-kiwi-oem-dump-9.17.15-lp150.2.20.1 dracut-kiwi-oem-repart-9.17.15-lp150.2.20.1 dracut-kiwi-overlay-9.17.15-lp150.2.20.1 kiwi-man-pages-9.17.15-lp150.2.20.1 kiwi-pxeboot-9.17.15-lp150.2.20.1 kiwi-tools-9.17.15-lp150.2.20.1 kiwi-tools-debuginfo-9.17.15-lp150.2.20.1 python-kiwi-debugsource-9.17.15-lp150.2.20.1 python2-kiwi-9.17.15-lp150.2.20.1 python3-kiwi-9.17.15-lp150.2.20.1 References: https://bugzilla.suse.com/1128146

1 0

openSUSE-SU-2019:1646-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1646-1 Rating: moderate References: #1136021 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for wireshark to version 2.4.15 fixes the following issues: Security issue fixed: - Fixed a denial of service in the dissection engine (bsc#1136021). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1646=1 Package List: - openSUSE Leap 42.3 (x86_64): libwireshark9-2.4.15-56.1 libwireshark9-debuginfo-2.4.15-56.1 libwiretap7-2.4.15-56.1 libwiretap7-debuginfo-2.4.15-56.1 libwscodecs1-2.4.15-56.1 libwscodecs1-debuginfo-2.4.15-56.1 libwsutil8-2.4.15-56.1 libwsutil8-debuginfo-2.4.15-56.1 wireshark-2.4.15-56.1 wireshark-debuginfo-2.4.15-56.1 wireshark-debugsource-2.4.15-56.1 wireshark-devel-2.4.15-56.1 wireshark-gtk-2.4.15-56.1 wireshark-gtk-debuginfo-2.4.15-56.1 wireshark-ui-qt-2.4.15-56.1 wireshark-ui-qt-debuginfo-2.4.15-56.1 References: https://bugzilla.suse.com/1136021

1 0

openSUSE-RU-2019:1641-1: Recommended update for nautilus
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for nautilus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1641-1 Rating: low References: #1089892 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nautilus provides the following fix: - Show a notification when disks can be safely removed after unmounting. (bsc#1089892, jsc#SLE-6657) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1641=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): gnome-shell-search-provider-nautilus-3.20.3-8.10.1 libnautilus-extension1-3.20.3-8.10.1 libnautilus-extension1-debuginfo-3.20.3-8.10.1 nautilus-3.20.3-8.10.1 nautilus-debuginfo-3.20.3-8.10.1 nautilus-debugsource-3.20.3-8.10.1 nautilus-devel-3.20.3-8.10.1 typelib-1_0-Nautilus-3_0-3.20.3-8.10.1 - openSUSE Leap 42.3 (noarch): nautilus-lang-3.20.3-8.10.1 - openSUSE Leap 42.3 (x86_64): libnautilus-extension1-32bit-3.20.3-8.10.1 libnautilus-extension1-debuginfo-32bit-3.20.3-8.10.1 References: https://bugzilla.suse.com/1089892

1 0

openSUSE-SU-2019:1640-1: moderate: Security update for libssh2_org
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for libssh2_org ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1640-1 Rating: moderate References: #1128481 #1136570 Cross-References: CVE-2019-3860 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for libssh2_org fixes the following issues: - Fix the previous fix for CVE-2019-3860 (bsc#1136570, bsc#1128481) (Out-of-bounds reads with specially crafted SFTP packets) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1640=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libssh2-1-1.4.3-19.9.1 libssh2-1-debuginfo-1.4.3-19.9.1 libssh2-devel-1.4.3-19.9.1 libssh2_org-debugsource-1.4.3-19.9.1 - openSUSE Leap 42.3 (x86_64): libssh2-1-32bit-1.4.3-19.9.1 libssh2-1-debuginfo-32bit-1.4.3-19.9.1 References: https://www.suse.com/security/cve/CVE-2019-3860.html https://bugzilla.suse.com/1128481 https://bugzilla.suse.com/1136570

1 0

openSUSE-SU-2019:1633-1: moderate: Security update for SDL2
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for SDL2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1633-1 Rating: moderate References: #1124825 #1134135 Cross-References: CVE-2019-7637 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for SDL2 fixes the following issues: - Remove the fix for CVE-2019-7637, the modification of function SDL_CalculatePitch is only suited for SDL not SDL2, and breaks SDL2 software. (bsc#1134135) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1633=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): SDL2-debugsource-2.0.8-lp151.4.3.1 libSDL2-2_0-0-2.0.8-lp151.4.3.1 libSDL2-2_0-0-debuginfo-2.0.8-lp151.4.3.1 libSDL2-devel-2.0.8-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): libSDL2-2_0-0-32bit-2.0.8-lp151.4.3.1 libSDL2-2_0-0-32bit-debuginfo-2.0.8-lp151.4.3.1 libSDL2-devel-32bit-2.0.8-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-7637.html https://bugzilla.suse.com/1124825 https://bugzilla.suse.com/1134135

1 0

openSUSE-RU-2019:1648-1: Recommended update for apache2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1648-1 Rating: low References: #1134294 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for apache2 fixes the following issues: - Reinstate apache-22-24-upgrade migration script to enable smooth update from Apache 2.2 to 2.4 [bsc#1134294] This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1648=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): apache2-2.4.33-lp150.2.20.1 apache2-debuginfo-2.4.33-lp150.2.20.1 apache2-debugsource-2.4.33-lp150.2.20.1 apache2-devel-2.4.33-lp150.2.20.1 apache2-event-2.4.33-lp150.2.20.1 apache2-event-debuginfo-2.4.33-lp150.2.20.1 apache2-example-pages-2.4.33-lp150.2.20.1 apache2-prefork-2.4.33-lp150.2.20.1 apache2-prefork-debuginfo-2.4.33-lp150.2.20.1 apache2-utils-2.4.33-lp150.2.20.1 apache2-utils-debuginfo-2.4.33-lp150.2.20.1 apache2-worker-2.4.33-lp150.2.20.1 apache2-worker-debuginfo-2.4.33-lp150.2.20.1 - openSUSE Leap 15.0 (noarch): apache2-doc-2.4.33-lp150.2.20.1 References: https://bugzilla.suse.com/1134294

1 0

openSUSE-RU-2019:1647-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1647-1 Rating: moderate References: #1128032 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2 fixes the following issues: - Stop "ls: write error: Broken pipe" messages. (bsc#1128032) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1647=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-3.2.46.1-2.12.1 References: https://bugzilla.suse.com/1128032

1 0

openSUSE-SU-2019:1657-1: moderate: Security update for exempi
by opensuse-security＠opensuse.org 27 Jun '19

27 Jun '19

openSUSE Security Update: Security update for exempi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1657-1 Rating: moderate References: #1098946 Cross-References: CVE-2018-12648 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1657=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): exempi-debugsource-2.4.5-lp151.3.3.1 exempi-tools-2.4.5-lp151.3.3.1 exempi-tools-debuginfo-2.4.5-lp151.3.3.1 libexempi-devel-2.4.5-lp151.3.3.1 libexempi3-2.4.5-lp151.3.3.1 libexempi3-debuginfo-2.4.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libexempi3-32bit-2.4.5-lp151.3.3.1 libexempi3-32bit-debuginfo-2.4.5-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2018-12648.html https://bugzilla.suse.com/1098946

1 0

openSUSE-RU-2019:1628-1: moderate: Recommended update for google-compute-engine
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for google-compute-engine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1628-1 Rating: moderate References: #1136266 #1136267 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for google-compute-engine fixes the following issues: Update to version 20190522 (bsc#1136266, bsc#1136267) + Google Compute Engine * Fix guest attributes flow in Python 3. + Google Compute Engine OS Login * Update OS Login control file for FreeBSD support. Update to version 20190521: + Google Compute Engine * Retry download for metadata scripts. * Fix script retrieval in Python 3. * Disable boto config in Python 3. * Update SSH host keys in guest attributes. * Fix XPS settings with more than 64 vCPUs. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1628=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1628=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): google-compute-engine-debugsource-20190522-lp151.2.6.1 google-compute-engine-oslogin-20190522-lp151.2.6.1 google-compute-engine-oslogin-debuginfo-20190522-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): google-compute-engine-oslogin-32bit-20190522-lp151.2.6.1 google-compute-engine-oslogin-32bit-debuginfo-20190522-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): google-compute-engine-init-20190522-lp151.2.6.1 - openSUSE Leap 15.0 (x86_64): google-compute-engine-debugsource-20190522-lp150.2.22.1 google-compute-engine-oslogin-20190522-lp150.2.22.1 google-compute-engine-oslogin-debuginfo-20190522-lp150.2.22.1 - openSUSE Leap 15.0 (noarch): google-compute-engine-init-20190522-lp150.2.22.1 References: https://bugzilla.suse.com/1136266 https://bugzilla.suse.com/1136267

1 0