June 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1627-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1627-1 Rating: moderate References: #1040055 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnome-control-center fixes the following issues: - Fixes an issue in the GUI where a text overlapped with a form field (bsc#1040055) - Fixed an issue with the panel search - Fixed some keyboard navigation issues - Fixes a possible crash on startup - Network: Fix some SSID escaping issues - Power: Fix hiding wi-fi, mobile broadband toggles. - Power: Fix wifi device state when opening power panel. - Privacy: React to changes in permissions store. - User accounts: Fix missing records in the history dialog. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1627=1 Package List: - openSUSE Leap 42.3 (noarch): gnome-control-center-lang-3.20.2-18.9.1 - openSUSE Leap 42.3 (x86_64): gnome-control-center-3.20.2-18.9.1 gnome-control-center-color-3.20.2-18.9.1 gnome-control-center-debuginfo-3.20.2-18.9.1 gnome-control-center-debugsource-3.20.2-18.9.1 gnome-control-center-devel-3.20.2-18.9.1 gnome-control-center-goa-3.20.2-18.9.1 gnome-control-center-user-faces-3.20.2-18.9.1 References: https://bugzilla.suse.com/1040055

1 0

openSUSE-SU-2019:1629-1: moderate: Security update for libmediainfo
by opensuse-security＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Security Update: Security update for libmediainfo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1629-1 Rating: moderate References: #1133156 #1133157 Cross-References: CVE-2019-11372 CVE-2019-11373 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libmediainfo fixes the following issues: * CVE-2019-11373: Fixed out-of-bounds read in function File__Analyze:Get_L8 (boo#1133156) * CVE-2019-11372: Fixed out-of-bounds read in function MediaInfoLib:File__Tags_Helper:Synched_Test (boo#1133157) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1629=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1629=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1629=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmediainfo-debugsource-0.7.96-2.3.1 libmediainfo-devel-0.7.96-2.3.1 libmediainfo0-0.7.96-2.3.1 libmediainfo0-debuginfo-0.7.96-2.3.1 - openSUSE Leap 42.3 (x86_64): libmediainfo0-32bit-0.7.96-2.3.1 libmediainfo0-debuginfo-32bit-0.7.96-2.3.1 - openSUSE Leap 15.0 (i586 x86_64): libmediainfo-debugsource-18.03-lp150.2.3.1 libmediainfo-devel-18.03-lp150.2.3.1 libmediainfo0-18.03-lp150.2.3.1 libmediainfo0-debuginfo-18.03-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libmediainfo0-32bit-18.03-lp150.2.3.1 libmediainfo0-32bit-debuginfo-18.03-lp150.2.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libmediainfo-devel-18.03-bp150.3.3.1 libmediainfo0-18.03-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libmediainfo0-64bit-18.03-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11372.html https://www.suse.com/security/cve/CVE-2019-11373.html https://bugzilla.suse.com/1133156 https://bugzilla.suse.com/1133157

1 0

openSUSE-RU-2019:1630-1: moderate: Recommended update for rpcbind
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for rpcbind ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1630-1 Rating: moderate References: #1134659 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rpcbind fixes the following issues: - change rpcbind locking path from /var/run/rpcbind.lock to /run/rpcbind.lock (bsc#1134659) - change the order of socket/service in the %postun scriptlet to avoid an error from rpcbind.socket when rpcbind is running during package update This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2019-1630=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): rpcbind-0.2.3-6.6.1 rpcbind-debuginfo-0.2.3-6.6.1 rpcbind-debugsource-0.2.3-6.6.1 References: https://bugzilla.suse.com/1134659

1 0

openSUSE-RU-2019:1626-1: moderate: Recommended update for permissions
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1626-1 Rating: moderate References: #1128598 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - Added whitelisting for /usr/lib/singularity/bin/starter-suid in the new singularity 3.1 version. (bsc#1128598) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1626=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): permissions-20180125-lp150.2.13.1 permissions-debuginfo-20180125-lp150.2.13.1 permissions-debugsource-20180125-lp150.2.13.1 References: https://bugzilla.suse.com/1128598

1 0

openSUSE-RU-2019:1625-1: moderate: Recommended update for lua-lua-mpris
by maintenance＠opensuse.org 26 Jun '19

26 Jun '19

openSUSE Recommended Update: Recommended update for lua-lua-mpris ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1625-1 Rating: moderate References: #1136883 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua-lua-mpris fixes the following issues: Changes in lua-lua-mpris: - Fixed an error introduced by bad last minute refactoring (boo#1136883). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1625=1 Package List: - openSUSE Backports SLE-15 (x86_64): lua51-lua-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 lua53-lua-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 mpv-plugin-mpris-0.0+git20170918.28b1c75-bp150.2.6.1 References: https://bugzilla.suse.com/1136883

1 0

openSUSE-SU-2019:1623-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1623-1 Rating: moderate References: #1138425 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for GraphicsMagick fixes the following issues: - disable indirect reads that disclosed file contents from the local system (boo#1138425) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1623=1 Package List: - openSUSE Backports SLE-15 (x86_64): GraphicsMagick-1.3.29-bp150.2.27.1 GraphicsMagick-devel-1.3.29-bp150.2.27.1 libGraphicsMagick++-Q16-12-1.3.29-bp150.2.27.1 libGraphicsMagick++-devel-1.3.29-bp150.2.27.1 libGraphicsMagick-Q16-3-1.3.29-bp150.2.27.1 libGraphicsMagick3-config-1.3.29-bp150.2.27.1 libGraphicsMagickWand-Q16-2-1.3.29-bp150.2.27.1 perl-GraphicsMagick-1.3.29-bp150.2.27.1 References: https://bugzilla.suse.com/1138425

1 0

openSUSE-SU-2019:1624-1: moderate: Security update for aubio
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for aubio ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1624-1 Rating: moderate References: #1137822 #1137823 #1137828 Cross-References: CVE-2018-19800 CVE-2018-19801 CVE-2018-19802 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for aubio fixes the following issues: Fixed security issues leading to buffer overflows or segfaults (CVE-2018-19800, boo#1137828, CVE-2018-19801, boo#1137822, CVE-2018-19802, boo#1137823): This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1624=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): python-aubio-debugsource-0.4.6-bp150.3.12.1 python2-aubio-0.4.6-bp150.3.12.1 python2-aubio-debuginfo-0.4.6-bp150.3.12.1 python3-aubio-0.4.6-bp150.3.12.1 python3-aubio-debuginfo-0.4.6-bp150.3.12.1 - openSUSE Backports SLE-15 (x86_64): aubio-tools-0.4.6-bp150.3.12.1 libaubio-devel-0.4.6-bp150.3.12.1 libaubio5-0.4.6-bp150.3.12.1 References: https://www.suse.com/security/cve/CVE-2018-19800.html https://www.suse.com/security/cve/CVE-2018-19801.html https://www.suse.com/security/cve/CVE-2018-19802.html https://bugzilla.suse.com/1137822 https://bugzilla.suse.com/1137823 https://bugzilla.suse.com/1137828

1 0

openSUSE-RU-2019:1622-1: moderate: Recommended update for gnuhealth
by maintenance＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Recommended Update: Recommended update for gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1622-1 Rating: moderate References: #1107771 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth fixes the following issues: Changes in gnuhealth: - correction for gnuhealth-control (v 3.2.4) - Adding a dummy executable called 'gnuhealth' with some help text (boo#1107771) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1622=1 Package List: - openSUSE Backports SLE-15 (noarch): gnuhealth-3.2.10-bp150.5.14.1 References: https://bugzilla.suse.com/1107771

1 0

openSUSE-SU-2019:1621-1: moderate: Security update for docker
by opensuse-security＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Security Update: Security update for docker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1621-1 Rating: moderate References: #1096726 Cross-References: CVE-2018-15664 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for docker fixes the following issues: Security issue fixed: - CVE-2018-15664: Fixed an issue which could make docker cp vulnerable to symlink-exchange race attacks (bsc#1096726). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1621=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1621=1 Package List: - openSUSE Leap 15.1 (x86_64): docker-18.09.6_ce-lp151.2.6.1 docker-debuginfo-18.09.6_ce-lp151.2.6.1 docker-debugsource-18.09.6_ce-lp151.2.6.1 docker-test-18.09.6_ce-lp151.2.6.1 docker-test-debuginfo-18.09.6_ce-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): docker-bash-completion-18.09.6_ce-lp151.2.6.1 docker-zsh-completion-18.09.6_ce-lp151.2.6.1 - openSUSE Leap 15.0 (x86_64): docker-18.09.6_ce-lp150.5.20.1 docker-debuginfo-18.09.6_ce-lp150.5.20.1 docker-debugsource-18.09.6_ce-lp150.5.20.1 docker-test-18.09.6_ce-lp150.5.20.1 docker-test-debuginfo-18.09.6_ce-lp150.5.20.1 - openSUSE Leap 15.0 (noarch): docker-bash-completion-18.09.6_ce-lp150.5.20.1 docker-zsh-completion-18.09.6_ce-lp150.5.20.1 References: https://www.suse.com/security/cve/CVE-2018-15664.html https://bugzilla.suse.com/1096726

1 0

openSUSE-RU-2019:1620-1: moderate: Recommended update for keepassxc
by maintenance＠opensuse.org 25 Jun '19

25 Jun '19

openSUSE Recommended Update: Recommended update for keepassxc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1620-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for keepassxc fixes the following issues: keepassxc updated to 2.4.3: - Fix library loading issues in the Snap and macOS releases [#3247] - Fix various keyboard navigation issues [#3248] - Fix main window toggling regression when clicking the tray icon on KDE [#3258] - Add documentation for keyboard shortcuts to source code distribution [#3215] Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1620=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1620=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1620=1 Package List: - openSUSE Leap 15.1 (noarch): keepassxc-lang-2.4.3-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): keepassxc-2.4.3-lp151.2.6.1 keepassxc-debuginfo-2.4.3-lp151.2.6.1 keepassxc-debugsource-2.4.3-lp151.2.6.1 - openSUSE Leap 15.0 (noarch): keepassxc-lang-2.4.3-lp150.2.12.1 - openSUSE Leap 15.0 (x86_64): keepassxc-2.4.3-lp150.2.12.1 keepassxc-debuginfo-2.4.3-lp150.2.12.1 keepassxc-debugsource-2.4.3-lp150.2.12.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): keepassxc-2.4.3-bp150.2.12.1 - openSUSE Backports SLE-15 (noarch): keepassxc-lang-2.4.3-bp150.2.12.1 References:

1 0