July 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:1779-1: moderate: Security update for ledger
by opensuse-security＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Security Update: Security update for ledger ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1779-1 Rating: moderate References: #1052478 #1052484 #1105084 Cross-References: CVE-2017-12481 CVE-2017-12482 CVE-2017-2807 CVE-2017-2808 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ledger fixes the following issues: ledger was updated to 3.1.3: + Properly reject postings with a comment right after the flag (bug #1753) + Make sorting order of lot information deterministic (bug #1747) + Fix bug in tag value parsing (bug #1702) + Remove the org command, which was always a hack to begin with (bug #1706) + Provide Docker information in README + Various small documentation improvements This also includes the update to 3.1.2: + Increase maximum length for regex from 255 to 4095 (bug #981) + Initialize periods from from/since clause rather than earliest transaction date (bug #1159) + Check balance assertions against the amount after the posting (bug #1147) + Allow balance assertions with multiple posts to same account (bug #1187) + Fix period duration of "every X days" and similar statements (bug #370) + Make option --force-color not require --color anymore (bug #1109) + Add quoted_rfc4180 to allow CVS output with RFC 4180 compliant quoting. + Add support for --prepend-format in accounts command + Fix handling of edge cases in trim function (bug #520) + Fix auto xact posts not getting applied to account total during journal parse (bug #552) + Transfer null_post flags to generated postings + Fix segfault when using --market with --group-by + Use amount_width variable for budget report + Keep pending items in budgets until the last day they apply + Fix bug where .total used in value expressions breaks totals + Make automated transactions work with assertions (bug #1127) + Improve parsing of date tokens (bug #1626) + Don't attempt to invert a value if it's already zero (bug #1703) + Do not parse user-specified init-file twice + Fix parsing issue of effective dates (bug #1722, TALOS-2017-0303, CVE-2017-2807) + Fix use-after-free issue with deferred postings (bug #1723, TALOS-2017-0304, CVE-2017-2808) + Fix possible stack overflow in option parsing routine (bug #1222, CVE-2017-12481) + Fix possible stack overflow in date parsing routine (bug #1224, CVE-2017-12482) + Fix use-after-free when using --gain (bug #541) + Python: Removed double quotes from Unicode values. + Python: Ensure that parse errors produce useful RuntimeErrors + Python: Expose journal expand_aliases + Python: Expose journal_t::register_account + Improve bash completion + Emacs Lisp files have been moved to https://github.com/ledger/ledger-mode + Various documentation improvements Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1779=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1779=1 Package List: - openSUSE Leap 15.1 (x86_64): ledger-3.1.3-lp151.3.3.1 ledger-debuginfo-3.1.3-lp151.3.3.1 ledger-debugsource-3.1.3-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): ledger-3.1.3-lp150.2.3.1 ledger-debuginfo-3.1.3-lp150.2.3.1 ledger-debugsource-3.1.3-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2017-12481.html https://www.suse.com/security/cve/CVE-2017-12482.html https://www.suse.com/security/cve/CVE-2017-2807.html https://www.suse.com/security/cve/CVE-2017-2808.html https://bugzilla.suse.com/1052478 https://bugzilla.suse.com/1052484 https://bugzilla.suse.com/1105084

1 0

openSUSE-RU-2019:1764-1: moderate: Recommended update for gnome-shell-extensions
by maintenance＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Recommended Update: Recommended update for gnome-shell-extensions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1764-1 Rating: moderate References: #1129412 #1137735 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gnome-shell-extensions provides the following fixes: - Split the architecture dependent session file to a new package gnome-shell-classic-session required by gnome-shell-classic. (bsc#1137735, bsc#1129412) - Remove the gnome session runtime requirement of g-s-d Wacom plugin because it is not build on s390. (bsc#1129412) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1764=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1764=1 Package List: - openSUSE Leap 15.1 (x86_64): gnome-shell-classic-session-3.26.2-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): gnome-shell-classic-3.26.2-lp151.8.3.1 gnome-shell-extensions-common-3.26.2-lp151.8.3.1 gnome-shell-extensions-common-lang-3.26.2-lp151.8.3.1 - openSUSE Leap 15.0 (x86_64): gnome-shell-classic-session-3.26.2-lp150.11.1 - openSUSE Leap 15.0 (noarch): gnome-shell-classic-3.26.2-lp150.11.1 gnome-shell-extensions-common-3.26.2-lp150.11.1 gnome-shell-extensions-common-lang-3.26.2-lp150.11.1 References: https://bugzilla.suse.com/1129412 https://bugzilla.suse.com/1137735

1 0

openSUSE-SU-2019:1760-1: moderate: Security update for python-Twisted
by opensuse-security＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Security Update: Security update for python-Twisted ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1760-1 Rating: moderate References: #1137825 Cross-References: CVE-2019-12387 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python-Twisted fixes the following issue: Security issue fixed: - CVE-2019-12387: Fixed an improper sanitization of URIs or HTTP which could have allowed attackers to perfrom CRLF attacks (bsc#1137825). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1760=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1760=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): python-Twisted-debuginfo-17.9.0-lp151.3.3.1 python-Twisted-debugsource-17.9.0-lp151.3.3.1 python-Twisted-doc-17.9.0-lp151.3.3.1 python2-Twisted-17.9.0-lp151.3.3.1 python2-Twisted-debuginfo-17.9.0-lp151.3.3.1 python3-Twisted-17.9.0-lp151.3.3.1 python3-Twisted-debuginfo-17.9.0-lp151.3.3.1 - openSUSE Leap 15.0 (i586 x86_64): python-Twisted-debuginfo-17.9.0-lp150.2.3.1 python-Twisted-debugsource-17.9.0-lp150.2.3.1 python-Twisted-doc-17.9.0-lp150.2.3.1 python2-Twisted-17.9.0-lp150.2.3.1 python2-Twisted-debuginfo-17.9.0-lp150.2.3.1 python3-Twisted-17.9.0-lp150.2.3.1 python3-Twisted-debuginfo-17.9.0-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-12387.html https://bugzilla.suse.com/1137825

1 0

openSUSE-SU-2019:1778-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1778-1 Rating: moderate References: #1138172 #1138173 Cross-References: CVE-2019-11039 CVE-2019-11040 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for php7 fixes the following issues: Security issues fixed: - CVE-2019-11039: Fixed a heap-buffer-overflow on php_jpg_get16 (bsc#1138173). - CVE-2019-11040: Fixed an out-of-bounds read due to an integer overflow in iconv.c:_php_iconv_mime_decode() (bsc#1138172). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1778=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1778=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): apache2-mod_php7-7.2.5-lp151.6.6.1 apache2-mod_php7-debuginfo-7.2.5-lp151.6.6.1 php7-7.2.5-lp151.6.6.1 php7-bcmath-7.2.5-lp151.6.6.1 php7-bcmath-debuginfo-7.2.5-lp151.6.6.1 php7-bz2-7.2.5-lp151.6.6.1 php7-bz2-debuginfo-7.2.5-lp151.6.6.1 php7-calendar-7.2.5-lp151.6.6.1 php7-calendar-debuginfo-7.2.5-lp151.6.6.1 php7-ctype-7.2.5-lp151.6.6.1 php7-ctype-debuginfo-7.2.5-lp151.6.6.1 php7-curl-7.2.5-lp151.6.6.1 php7-curl-debuginfo-7.2.5-lp151.6.6.1 php7-dba-7.2.5-lp151.6.6.1 php7-dba-debuginfo-7.2.5-lp151.6.6.1 php7-debuginfo-7.2.5-lp151.6.6.1 php7-debugsource-7.2.5-lp151.6.6.1 php7-devel-7.2.5-lp151.6.6.1 php7-dom-7.2.5-lp151.6.6.1 php7-dom-debuginfo-7.2.5-lp151.6.6.1 php7-embed-7.2.5-lp151.6.6.1 php7-embed-debuginfo-7.2.5-lp151.6.6.1 php7-enchant-7.2.5-lp151.6.6.1 php7-enchant-debuginfo-7.2.5-lp151.6.6.1 php7-exif-7.2.5-lp151.6.6.1 php7-exif-debuginfo-7.2.5-lp151.6.6.1 php7-fastcgi-7.2.5-lp151.6.6.1 php7-fastcgi-debuginfo-7.2.5-lp151.6.6.1 php7-fileinfo-7.2.5-lp151.6.6.1 php7-fileinfo-debuginfo-7.2.5-lp151.6.6.1 php7-firebird-7.2.5-lp151.6.6.1 php7-firebird-debuginfo-7.2.5-lp151.6.6.1 php7-fpm-7.2.5-lp151.6.6.1 php7-fpm-debuginfo-7.2.5-lp151.6.6.1 php7-ftp-7.2.5-lp151.6.6.1 php7-ftp-debuginfo-7.2.5-lp151.6.6.1 php7-gd-7.2.5-lp151.6.6.1 php7-gd-debuginfo-7.2.5-lp151.6.6.1 php7-gettext-7.2.5-lp151.6.6.1 php7-gettext-debuginfo-7.2.5-lp151.6.6.1 php7-gmp-7.2.5-lp151.6.6.1 php7-gmp-debuginfo-7.2.5-lp151.6.6.1 php7-iconv-7.2.5-lp151.6.6.1 php7-iconv-debuginfo-7.2.5-lp151.6.6.1 php7-intl-7.2.5-lp151.6.6.1 php7-intl-debuginfo-7.2.5-lp151.6.6.1 php7-json-7.2.5-lp151.6.6.1 php7-json-debuginfo-7.2.5-lp151.6.6.1 php7-ldap-7.2.5-lp151.6.6.1 php7-ldap-debuginfo-7.2.5-lp151.6.6.1 php7-mbstring-7.2.5-lp151.6.6.1 php7-mbstring-debuginfo-7.2.5-lp151.6.6.1 php7-mysql-7.2.5-lp151.6.6.1 php7-mysql-debuginfo-7.2.5-lp151.6.6.1 php7-odbc-7.2.5-lp151.6.6.1 php7-odbc-debuginfo-7.2.5-lp151.6.6.1 php7-opcache-7.2.5-lp151.6.6.1 php7-opcache-debuginfo-7.2.5-lp151.6.6.1 php7-openssl-7.2.5-lp151.6.6.1 php7-openssl-debuginfo-7.2.5-lp151.6.6.1 php7-pcntl-7.2.5-lp151.6.6.1 php7-pcntl-debuginfo-7.2.5-lp151.6.6.1 php7-pdo-7.2.5-lp151.6.6.1 php7-pdo-debuginfo-7.2.5-lp151.6.6.1 php7-pgsql-7.2.5-lp151.6.6.1 php7-pgsql-debuginfo-7.2.5-lp151.6.6.1 php7-phar-7.2.5-lp151.6.6.1 php7-phar-debuginfo-7.2.5-lp151.6.6.1 php7-posix-7.2.5-lp151.6.6.1 php7-posix-debuginfo-7.2.5-lp151.6.6.1 php7-readline-7.2.5-lp151.6.6.1 php7-readline-debuginfo-7.2.5-lp151.6.6.1 php7-shmop-7.2.5-lp151.6.6.1 php7-shmop-debuginfo-7.2.5-lp151.6.6.1 php7-snmp-7.2.5-lp151.6.6.1 php7-snmp-debuginfo-7.2.5-lp151.6.6.1 php7-soap-7.2.5-lp151.6.6.1 php7-soap-debuginfo-7.2.5-lp151.6.6.1 php7-sockets-7.2.5-lp151.6.6.1 php7-sockets-debuginfo-7.2.5-lp151.6.6.1 php7-sodium-7.2.5-lp151.6.6.1 php7-sodium-debuginfo-7.2.5-lp151.6.6.1 php7-sqlite-7.2.5-lp151.6.6.1 php7-sqlite-debuginfo-7.2.5-lp151.6.6.1 php7-sysvmsg-7.2.5-lp151.6.6.1 php7-sysvmsg-debuginfo-7.2.5-lp151.6.6.1 php7-sysvsem-7.2.5-lp151.6.6.1 php7-sysvsem-debuginfo-7.2.5-lp151.6.6.1 php7-sysvshm-7.2.5-lp151.6.6.1 php7-sysvshm-debuginfo-7.2.5-lp151.6.6.1 php7-testresults-7.2.5-lp151.6.6.1 php7-tidy-7.2.5-lp151.6.6.1 php7-tidy-debuginfo-7.2.5-lp151.6.6.1 php7-tokenizer-7.2.5-lp151.6.6.1 php7-tokenizer-debuginfo-7.2.5-lp151.6.6.1 php7-wddx-7.2.5-lp151.6.6.1 php7-wddx-debuginfo-7.2.5-lp151.6.6.1 php7-xmlreader-7.2.5-lp151.6.6.1 php7-xmlreader-debuginfo-7.2.5-lp151.6.6.1 php7-xmlrpc-7.2.5-lp151.6.6.1 php7-xmlrpc-debuginfo-7.2.5-lp151.6.6.1 php7-xmlwriter-7.2.5-lp151.6.6.1 php7-xmlwriter-debuginfo-7.2.5-lp151.6.6.1 php7-xsl-7.2.5-lp151.6.6.1 php7-xsl-debuginfo-7.2.5-lp151.6.6.1 php7-zip-7.2.5-lp151.6.6.1 php7-zip-debuginfo-7.2.5-lp151.6.6.1 php7-zlib-7.2.5-lp151.6.6.1 php7-zlib-debuginfo-7.2.5-lp151.6.6.1 - openSUSE Leap 15.1 (noarch): php7-pear-7.2.5-lp151.6.6.1 php7-pear-Archive_Tar-7.2.5-lp151.6.6.1 - openSUSE Leap 15.0 (i586 x86_64): apache2-mod_php7-7.2.5-lp150.2.22.1 apache2-mod_php7-debuginfo-7.2.5-lp150.2.22.1 php7-7.2.5-lp150.2.22.1 php7-bcmath-7.2.5-lp150.2.22.1 php7-bcmath-debuginfo-7.2.5-lp150.2.22.1 php7-bz2-7.2.5-lp150.2.22.1 php7-bz2-debuginfo-7.2.5-lp150.2.22.1 php7-calendar-7.2.5-lp150.2.22.1 php7-calendar-debuginfo-7.2.5-lp150.2.22.1 php7-ctype-7.2.5-lp150.2.22.1 php7-ctype-debuginfo-7.2.5-lp150.2.22.1 php7-curl-7.2.5-lp150.2.22.1 php7-curl-debuginfo-7.2.5-lp150.2.22.1 php7-dba-7.2.5-lp150.2.22.1 php7-dba-debuginfo-7.2.5-lp150.2.22.1 php7-debuginfo-7.2.5-lp150.2.22.1 php7-debugsource-7.2.5-lp150.2.22.1 php7-devel-7.2.5-lp150.2.22.1 php7-dom-7.2.5-lp150.2.22.1 php7-dom-debuginfo-7.2.5-lp150.2.22.1 php7-embed-7.2.5-lp150.2.22.1 php7-embed-debuginfo-7.2.5-lp150.2.22.1 php7-enchant-7.2.5-lp150.2.22.1 php7-enchant-debuginfo-7.2.5-lp150.2.22.1 php7-exif-7.2.5-lp150.2.22.1 php7-exif-debuginfo-7.2.5-lp150.2.22.1 php7-fastcgi-7.2.5-lp150.2.22.1 php7-fastcgi-debuginfo-7.2.5-lp150.2.22.1 php7-fileinfo-7.2.5-lp150.2.22.1 php7-fileinfo-debuginfo-7.2.5-lp150.2.22.1 php7-firebird-7.2.5-lp150.2.22.1 php7-firebird-debuginfo-7.2.5-lp150.2.22.1 php7-fpm-7.2.5-lp150.2.22.1 php7-fpm-debuginfo-7.2.5-lp150.2.22.1 php7-ftp-7.2.5-lp150.2.22.1 php7-ftp-debuginfo-7.2.5-lp150.2.22.1 php7-gd-7.2.5-lp150.2.22.1 php7-gd-debuginfo-7.2.5-lp150.2.22.1 php7-gettext-7.2.5-lp150.2.22.1 php7-gettext-debuginfo-7.2.5-lp150.2.22.1 php7-gmp-7.2.5-lp150.2.22.1 php7-gmp-debuginfo-7.2.5-lp150.2.22.1 php7-iconv-7.2.5-lp150.2.22.1 php7-iconv-debuginfo-7.2.5-lp150.2.22.1 php7-intl-7.2.5-lp150.2.22.1 php7-intl-debuginfo-7.2.5-lp150.2.22.1 php7-json-7.2.5-lp150.2.22.1 php7-json-debuginfo-7.2.5-lp150.2.22.1 php7-ldap-7.2.5-lp150.2.22.1 php7-ldap-debuginfo-7.2.5-lp150.2.22.1 php7-mbstring-7.2.5-lp150.2.22.1 php7-mbstring-debuginfo-7.2.5-lp150.2.22.1 php7-mysql-7.2.5-lp150.2.22.1 php7-mysql-debuginfo-7.2.5-lp150.2.22.1 php7-odbc-7.2.5-lp150.2.22.1 php7-odbc-debuginfo-7.2.5-lp150.2.22.1 php7-opcache-7.2.5-lp150.2.22.1 php7-opcache-debuginfo-7.2.5-lp150.2.22.1 php7-openssl-7.2.5-lp150.2.22.1 php7-openssl-debuginfo-7.2.5-lp150.2.22.1 php7-pcntl-7.2.5-lp150.2.22.1 php7-pcntl-debuginfo-7.2.5-lp150.2.22.1 php7-pdo-7.2.5-lp150.2.22.1 php7-pdo-debuginfo-7.2.5-lp150.2.22.1 php7-pgsql-7.2.5-lp150.2.22.1 php7-pgsql-debuginfo-7.2.5-lp150.2.22.1 php7-phar-7.2.5-lp150.2.22.1 php7-phar-debuginfo-7.2.5-lp150.2.22.1 php7-posix-7.2.5-lp150.2.22.1 php7-posix-debuginfo-7.2.5-lp150.2.22.1 php7-readline-7.2.5-lp150.2.22.1 php7-readline-debuginfo-7.2.5-lp150.2.22.1 php7-shmop-7.2.5-lp150.2.22.1 php7-shmop-debuginfo-7.2.5-lp150.2.22.1 php7-snmp-7.2.5-lp150.2.22.1 php7-snmp-debuginfo-7.2.5-lp150.2.22.1 php7-soap-7.2.5-lp150.2.22.1 php7-soap-debuginfo-7.2.5-lp150.2.22.1 php7-sockets-7.2.5-lp150.2.22.1 php7-sockets-debuginfo-7.2.5-lp150.2.22.1 php7-sodium-7.2.5-lp150.2.22.1 php7-sodium-debuginfo-7.2.5-lp150.2.22.1 php7-sqlite-7.2.5-lp150.2.22.1 php7-sqlite-debuginfo-7.2.5-lp150.2.22.1 php7-sysvmsg-7.2.5-lp150.2.22.1 php7-sysvmsg-debuginfo-7.2.5-lp150.2.22.1 php7-sysvsem-7.2.5-lp150.2.22.1 php7-sysvsem-debuginfo-7.2.5-lp150.2.22.1 php7-sysvshm-7.2.5-lp150.2.22.1 php7-sysvshm-debuginfo-7.2.5-lp150.2.22.1 php7-testresults-7.2.5-lp150.2.22.1 php7-tidy-7.2.5-lp150.2.22.1 php7-tidy-debuginfo-7.2.5-lp150.2.22.1 php7-tokenizer-7.2.5-lp150.2.22.1 php7-tokenizer-debuginfo-7.2.5-lp150.2.22.1 php7-wddx-7.2.5-lp150.2.22.1 php7-wddx-debuginfo-7.2.5-lp150.2.22.1 php7-xmlreader-7.2.5-lp150.2.22.1 php7-xmlreader-debuginfo-7.2.5-lp150.2.22.1 php7-xmlrpc-7.2.5-lp150.2.22.1 php7-xmlrpc-debuginfo-7.2.5-lp150.2.22.1 php7-xmlwriter-7.2.5-lp150.2.22.1 php7-xmlwriter-debuginfo-7.2.5-lp150.2.22.1 php7-xsl-7.2.5-lp150.2.22.1 php7-xsl-debuginfo-7.2.5-lp150.2.22.1 php7-zip-7.2.5-lp150.2.22.1 php7-zip-debuginfo-7.2.5-lp150.2.22.1 php7-zlib-7.2.5-lp150.2.22.1 php7-zlib-debuginfo-7.2.5-lp150.2.22.1 - openSUSE Leap 15.0 (noarch): php7-pear-7.2.5-lp150.2.22.1 php7-pear-Archive_Tar-7.2.5-lp150.2.22.1 References: https://www.suse.com/security/cve/CVE-2019-11039.html https://www.suse.com/security/cve/CVE-2019-11040.html https://bugzilla.suse.com/1138172 https://bugzilla.suse.com/1138173

1 0

openSUSE-RU-2019:1763-1: moderate: Recommended update for cluster-glue
by maintenance＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Recommended Update: Recommended update for cluster-glue ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1763-1 Rating: moderate References: #1131545 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cluster-glue fixes the following issues: - Directory /var/run/heartbeat/rsctmp will now get created if it doesn't exist (bsc#1131545) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1763=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1763=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cluster-glue-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 cluster-glue-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 cluster-glue-debugsource-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue-devel-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue-devel-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue2-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue2-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue2-32bit-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp151.2.3.1 - openSUSE Leap 15.0 (i586 x86_64): cluster-glue-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 cluster-glue-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 cluster-glue-debugsource-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue-devel-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue-devel-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue2-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue2-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): libglue-devel-32bit-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue-devel-32bit-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue2-32bit-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 libglue2-32bit-debuginfo-1.0.12+v1.git.1560323319.fd5a3bef-lp150.2.6.1 References: https://bugzilla.suse.com/1131545

1 0

openSUSE-RU-2019:1768-1: moderate: Recommended update for icewm
by maintenance＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Recommended Update: Recommended update for icewm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1768-1 Rating: moderate References: #1076817 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for icewm fixes the following issues: - Disabled icewm's suspend function in order to allow systemd the handling of power key events (bsc#1076817) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1768=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1768=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): icewm-1.4.2-lp151.8.3.1 icewm-debuginfo-1.4.2-lp151.8.3.1 icewm-debugsource-1.4.2-lp151.8.3.1 icewm-default-1.4.2-lp151.8.3.1 icewm-default-debuginfo-1.4.2-lp151.8.3.1 icewm-lite-1.4.2-lp151.8.3.1 icewm-lite-debuginfo-1.4.2-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): icewm-config-upstream-1.4.2-lp151.8.3.1 icewm-lang-1.4.2-lp151.8.3.1 - openSUSE Leap 15.0 (i586 x86_64): icewm-1.4.2-lp150.11.1 icewm-debuginfo-1.4.2-lp150.11.1 icewm-debugsource-1.4.2-lp150.11.1 icewm-default-1.4.2-lp150.11.1 icewm-default-debuginfo-1.4.2-lp150.11.1 icewm-lite-1.4.2-lp150.11.1 icewm-lite-debuginfo-1.4.2-lp150.11.1 - openSUSE Leap 15.0 (noarch): icewm-config-upstream-1.4.2-lp150.11.1 icewm-lang-1.4.2-lp150.11.1 References: https://bugzilla.suse.com/1076817

1 0

openSUSE-RU-2019:1765-1: moderate: Recommended update for machinery
by maintenance＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Recommended Update: Recommended update for machinery ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1765-1 Rating: moderate References: #1125785 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for machinery fixes the following issues: machinery was updated to version 1.24.1: * Fix HTML man page * Switch image building support from legacy Kiwi to Kiwi Next Generation * Allow newer json-schema releases than 2.2.5. Newer versions slow down parsing of manifests but newer Ruby versions have issues with old json schema releases. The performance issue is known upstream: (gh#ruby-json-schema/json-schema#261) * Fix machinery helper go version parsing (boo#1125785) * Improve parsing of SSH exceptions (gh#SUSE/machinery#2257) * Allow inspection of old 32-bit systems even when their architecture is reported as i586 or i386 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1765=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1765=1 Package List: - openSUSE Leap 15.1 (x86_64): machinery-1.24.1-lp151.3.3.1 machinery-debuginfo-1.24.1-lp151.3.3.1 machinery-doc-1.24.1-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): machinery-1.24.1-lp150.2.3.1 machinery-debuginfo-1.24.1-lp150.2.3.1 machinery-doc-1.24.1-lp150.2.3.1 References: https://bugzilla.suse.com/1125785

1 0

openSUSE-SU-2019:1766-1: important: Security update for webkit2gtk3
by opensuse-security＠opensuse.org 21 Jul '19

21 Jul '19

openSUSE Security Update: Security update for webkit2gtk3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1766-1 Rating: important References: #1133291 #1135715 Cross-References: CVE-2019-6237 CVE-2019-8571 CVE-2019-8583 CVE-2019-8584 CVE-2019-8586 CVE-2019-8587 CVE-2019-8594 CVE-2019-8595 CVE-2019-8596 CVE-2019-8597 CVE-2019-8601 CVE-2019-8607 CVE-2019-8608 CVE-2019-8609 CVE-2019-8610 CVE-2019-8611 CVE-2019-8615 CVE-2019-8619 CVE-2019-8622 CVE-2019-8623 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: This update for webkit2gtk3 to version 2.24.2 fixes the following issues: Security issues fixed: - CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8607, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8615, CVE-2019-8611, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623 (bsc#1135715). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1766=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1766=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.24.2-lp151.2.3.1 libjavascriptcoregtk-4_0-18-debuginfo-2.24.2-lp151.2.3.1 libwebkit2gtk-4_0-37-2.24.2-lp151.2.3.1 libwebkit2gtk-4_0-37-debuginfo-2.24.2-lp151.2.3.1 typelib-1_0-JavaScriptCore-4_0-2.24.2-lp151.2.3.1 typelib-1_0-WebKit2-4_0-2.24.2-lp151.2.3.1 typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp151.2.3.1 webkit-jsc-4-2.24.2-lp151.2.3.1 webkit-jsc-4-debuginfo-2.24.2-lp151.2.3.1 webkit2gtk-4_0-injected-bundles-2.24.2-lp151.2.3.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.24.2-lp151.2.3.1 webkit2gtk3-debugsource-2.24.2-lp151.2.3.1 webkit2gtk3-devel-2.24.2-lp151.2.3.1 webkit2gtk3-minibrowser-2.24.2-lp151.2.3.1 webkit2gtk3-minibrowser-debuginfo-2.24.2-lp151.2.3.1 webkit2gtk3-plugin-process-gtk2-2.24.2-lp151.2.3.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.24.2-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): libwebkit2gtk3-lang-2.24.2-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp151.2.3.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.24.2-lp151.2.3.1 libwebkit2gtk-4_0-37-32bit-2.24.2-lp151.2.3.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.24.2-lp151.2.3.1 - openSUSE Leap 15.0 (i586 x86_64): libjavascriptcoregtk-4_0-18-2.24.2-lp150.2.22.1 libjavascriptcoregtk-4_0-18-debuginfo-2.24.2-lp150.2.22.1 libwebkit2gtk-4_0-37-2.24.2-lp150.2.22.1 libwebkit2gtk-4_0-37-debuginfo-2.24.2-lp150.2.22.1 typelib-1_0-JavaScriptCore-4_0-2.24.2-lp150.2.22.1 typelib-1_0-WebKit2-4_0-2.24.2-lp150.2.22.1 typelib-1_0-WebKit2WebExtension-4_0-2.24.2-lp150.2.22.1 webkit-jsc-4-2.24.2-lp150.2.22.1 webkit-jsc-4-debuginfo-2.24.2-lp150.2.22.1 webkit2gtk-4_0-injected-bundles-2.24.2-lp150.2.22.1 webkit2gtk-4_0-injected-bundles-debuginfo-2.24.2-lp150.2.22.1 webkit2gtk3-debugsource-2.24.2-lp150.2.22.1 webkit2gtk3-devel-2.24.2-lp150.2.22.1 webkit2gtk3-minibrowser-2.24.2-lp150.2.22.1 webkit2gtk3-minibrowser-debuginfo-2.24.2-lp150.2.22.1 webkit2gtk3-plugin-process-gtk2-2.24.2-lp150.2.22.1 webkit2gtk3-plugin-process-gtk2-debuginfo-2.24.2-lp150.2.22.1 - openSUSE Leap 15.0 (noarch): libwebkit2gtk3-lang-2.24.2-lp150.2.22.1 - openSUSE Leap 15.0 (x86_64): libjavascriptcoregtk-4_0-18-32bit-2.24.2-lp150.2.22.1 libjavascriptcoregtk-4_0-18-32bit-debuginfo-2.24.2-lp150.2.22.1 libwebkit2gtk-4_0-37-32bit-2.24.2-lp150.2.22.1 libwebkit2gtk-4_0-37-32bit-debuginfo-2.24.2-lp150.2.22.1 References: https://www.suse.com/security/cve/CVE-2019-6237.html https://www.suse.com/security/cve/CVE-2019-8571.html https://www.suse.com/security/cve/CVE-2019-8583.html https://www.suse.com/security/cve/CVE-2019-8584.html https://www.suse.com/security/cve/CVE-2019-8586.html https://www.suse.com/security/cve/CVE-2019-8587.html https://www.suse.com/security/cve/CVE-2019-8594.html https://www.suse.com/security/cve/CVE-2019-8595.html https://www.suse.com/security/cve/CVE-2019-8596.html https://www.suse.com/security/cve/CVE-2019-8597.html https://www.suse.com/security/cve/CVE-2019-8601.html https://www.suse.com/security/cve/CVE-2019-8607.html https://www.suse.com/security/cve/CVE-2019-8608.html https://www.suse.com/security/cve/CVE-2019-8609.html https://www.suse.com/security/cve/CVE-2019-8610.html https://www.suse.com/security/cve/CVE-2019-8611.html https://www.suse.com/security/cve/CVE-2019-8615.html https://www.suse.com/security/cve/CVE-2019-8619.html https://www.suse.com/security/cve/CVE-2019-8622.html https://www.suse.com/security/cve/CVE-2019-8623.html https://bugzilla.suse.com/1133291 https://bugzilla.suse.com/1135715

1 0

openSUSE-SU-2019:1752-1: moderate: Security update for libqb
by opensuse-security＠opensuse.org 20 Jul '19

20 Jul '19

openSUSE Security Update: Security update for libqb ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1752-1 Rating: moderate References: #1137835 Cross-References: CVE-2019-12779 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libqb fixes the following issue: Security issue fixed: - CVE-2019-12779: Fixed an insecure treatment of IPC temporary files which could have allowed a local attacker to overwrite privileged system files (bsc#1137835). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1752=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libqb-debugsource-1.0.3+20190326.a521604-lp151.2.3.1 libqb-devel-1.0.3+20190326.a521604-lp151.2.3.1 libqb-tests-1.0.3+20190326.a521604-lp151.2.3.1 libqb-tests-debuginfo-1.0.3+20190326.a521604-lp151.2.3.1 libqb-tools-1.0.3+20190326.a521604-lp151.2.3.1 libqb-tools-debuginfo-1.0.3+20190326.a521604-lp151.2.3.1 libqb20-1.0.3+20190326.a521604-lp151.2.3.1 libqb20-debuginfo-1.0.3+20190326.a521604-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libqb-devel-32bit-1.0.3+20190326.a521604-lp151.2.3.1 libqb20-32bit-1.0.3+20190326.a521604-lp151.2.3.1 libqb20-32bit-debuginfo-1.0.3+20190326.a521604-lp151.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-12779.html https://bugzilla.suse.com/1137835

1 0

openSUSE-SU-2019:1750-1: important: Security update for dbus-1
by opensuse-security＠opensuse.org 20 Jul '19

20 Jul '19

openSUSE Security Update: Security update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1750-1 Rating: important References: #1137832 Cross-References: CVE-2019-12749 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for dbus-1 fixes the following issues: Security issue fixed: - CVE-2019-12749: Fixed an implementation flaw in DBUS_COOKIE_SHA1 which could have allowed local attackers to bypass authentication (bsc#1137832). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1750=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dbus-1-1.12.2-lp151.4.3.1 dbus-1-debuginfo-1.12.2-lp151.4.3.1 dbus-1-debugsource-1.12.2-lp151.4.3.1 dbus-1-devel-1.12.2-lp151.4.3.1 dbus-1-x11-1.12.2-lp151.4.3.1 dbus-1-x11-debuginfo-1.12.2-lp151.4.3.1 dbus-1-x11-debugsource-1.12.2-lp151.4.3.1 libdbus-1-3-1.12.2-lp151.4.3.1 libdbus-1-3-debuginfo-1.12.2-lp151.4.3.1 - openSUSE Leap 15.1 (noarch): dbus-1-devel-doc-1.12.2-lp151.4.3.1 - openSUSE Leap 15.1 (x86_64): dbus-1-32bit-debuginfo-1.12.2-lp151.4.3.1 dbus-1-devel-32bit-1.12.2-lp151.4.3.1 libdbus-1-3-32bit-1.12.2-lp151.4.3.1 libdbus-1-3-32bit-debuginfo-1.12.2-lp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-12749.html https://bugzilla.suse.com/1137832

1 0