August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1975-1: moderate: Recommended update for git-review
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for git-review ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1975-1 Rating: moderate References: #1134089 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for git-review fixes the following issues: Version update to 1.28.0 (bsc#1134089): * Support for auto-configuration of topic names based on the presence of keywords in the commit message is removed. Previously, keywords such as bug, bp or lp followed by a number would result in branch names containing the associated number, e.g. bug/123. This feature was OpenStack specific, was a frequent source of bugs and clearly wasn’t being used that often, given that StoryBoard is a thing now and no one had updated this feature to handle that metadata. * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit. Update to 1.27.0: * Work with python3 Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1975=1 Package List: - openSUSE Leap 15.1 (noarch): git-review-1.28.0-lp151.3.3.1 References: https://bugzilla.suse.com/1134089

1 0

openSUSE-RU-2019:1962-1: moderate: Recommended update for nmap
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for nmap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1962-1 Rating: moderate References: #1143277 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for nmap fixes the following issues: - Fixed an infinite loop in tls-alpn when server is forcing a protocol (bsc#1143277) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1962=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1962=1 Package List: - openSUSE Leap 15.1 (x86_64): ncat-7.70-lp151.3.6.1 ncat-debuginfo-7.70-lp151.3.6.1 ndiff-7.70-lp151.3.6.1 nmap-7.70-lp151.3.6.1 nmap-debuginfo-7.70-lp151.3.6.1 nmap-debugsource-7.70-lp151.3.6.1 nping-7.70-lp151.3.6.1 nping-debuginfo-7.70-lp151.3.6.1 zenmap-7.70-lp151.3.6.1 - openSUSE Leap 15.0 (x86_64): ncat-7.70-lp150.2.6.1 ncat-debuginfo-7.70-lp150.2.6.1 ndiff-7.70-lp150.2.6.1 nmap-7.70-lp150.2.6.1 nmap-debuginfo-7.70-lp150.2.6.1 nmap-debugsource-7.70-lp150.2.6.1 nping-7.70-lp150.2.6.1 nping-debuginfo-7.70-lp150.2.6.1 zenmap-7.70-lp150.2.6.1 References: https://bugzilla.suse.com/1143277

1 0

openSUSE-SU-2019:1965-1: moderate: Security update for wireshark
by opensuse-security＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Security Update: Security update for wireshark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1965-1 Rating: moderate References: #1141980 Cross-References: CVE-2019-13619 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for wireshark to version 2.4.16 fixes the following issues: Security issue fixed: - CVE-2019-13619: ASN.1 BER and related dissectors crash (bsc#1141980). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1965=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1965=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libwireshark9-2.4.16-lp151.2.6.1 libwireshark9-debuginfo-2.4.16-lp151.2.6.1 libwiretap7-2.4.16-lp151.2.6.1 libwiretap7-debuginfo-2.4.16-lp151.2.6.1 libwscodecs1-2.4.16-lp151.2.6.1 libwscodecs1-debuginfo-2.4.16-lp151.2.6.1 libwsutil8-2.4.16-lp151.2.6.1 libwsutil8-debuginfo-2.4.16-lp151.2.6.1 wireshark-2.4.16-lp151.2.6.1 wireshark-debuginfo-2.4.16-lp151.2.6.1 wireshark-debugsource-2.4.16-lp151.2.6.1 wireshark-devel-2.4.16-lp151.2.6.1 wireshark-ui-qt-2.4.16-lp151.2.6.1 wireshark-ui-qt-debuginfo-2.4.16-lp151.2.6.1 - openSUSE Leap 15.0 (i586 x86_64): libwireshark9-2.4.16-lp150.2.32.1 libwireshark9-debuginfo-2.4.16-lp150.2.32.1 libwiretap7-2.4.16-lp150.2.32.1 libwiretap7-debuginfo-2.4.16-lp150.2.32.1 libwscodecs1-2.4.16-lp150.2.32.1 libwscodecs1-debuginfo-2.4.16-lp150.2.32.1 libwsutil8-2.4.16-lp150.2.32.1 libwsutil8-debuginfo-2.4.16-lp150.2.32.1 wireshark-2.4.16-lp150.2.32.1 wireshark-debuginfo-2.4.16-lp150.2.32.1 wireshark-debugsource-2.4.16-lp150.2.32.1 wireshark-devel-2.4.16-lp150.2.32.1 wireshark-ui-qt-2.4.16-lp150.2.32.1 wireshark-ui-qt-debuginfo-2.4.16-lp150.2.32.1 References: https://www.suse.com/security/cve/CVE-2019-13619.html https://bugzilla.suse.com/1141980

1 0

openSUSE-SU-2019:1963-1: moderate: Security update for squid
by opensuse-security＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Security Update: Security update for squid ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1963-1 Rating: moderate References: #1140738 Cross-References: CVE-2019-13345 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for squid fixes the following issues: Security issue fixed: - CVE-2019-13345: Fixed a cross site scripting vulnerability via user_name or auth parameter in cachemgr.cgi (bsc#1140738). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1963=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1963=1 Package List: - openSUSE Leap 15.1 (x86_64): squid-4.8-lp151.2.3.1 squid-debuginfo-4.8-lp151.2.3.1 squid-debugsource-4.8-lp151.2.3.1 - openSUSE Leap 15.0 (x86_64): squid-4.8-lp150.9.1 squid-debuginfo-4.8-lp150.9.1 squid-debugsource-4.8-lp150.9.1 References: https://www.suse.com/security/cve/CVE-2019-13345.html https://bugzilla.suse.com/1140738

1 0

openSUSE-RU-2019:1966-1: moderate: Recommended update for python-billiard
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for python-billiard ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1966-1 Rating: moderate References: Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for python-billiard fixes the following issues: - Adjust description grammar. Drop filler wording. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1966=1 Package List: - openSUSE Leap 15.0 (noarch): python-billiard-doc-3.6.0.0-lp150.2.6.1 python3-billiard-3.6.0.0-lp150.2.6.1 - openSUSE Leap 15.0 (x86_64): python-billiard-debugsource-3.6.0.0-lp150.2.6.1 python2-billiard-3.6.0.0-lp150.2.6.1 python2-billiard-debuginfo-3.6.0.0-lp150.2.6.1 References:

1 0

openSUSE-RU-2019:1971-1: moderate: Recommended update for checkmedia
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for checkmedia ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1971-1 Rating: moderate References: #1139561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for checkmedia fixes the following issues: - Fix compatibilty issue with older gcc compiler. - work also wi - Add support for signed media. (bsc#1139561) - adjust tagmedia script - Update documentation. - Allow to set specific gpg key for signature verification. - Added tests for signature verification. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1971=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): checkmedia-5.2-lp151.2.3.1 checkmedia-debuginfo-5.2-lp151.2.3.1 checkmedia-debugsource-5.2-lp151.2.3.1 libmediacheck-devel-5.2-lp151.2.3.1 libmediacheck5-5.2-lp151.2.3.1 libmediacheck5-debuginfo-5.2-lp151.2.3.1 References: https://bugzilla.suse.com/1139561

1 0

openSUSE-RU-2019:1974-1: moderate: Recommended update for python3-ec2imgutils
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for python3-ec2imgutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1974-1 Rating: moderate References: #1144357 #1144358 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-ec2imgutils fixes the following issues: - Fixes an issue with a name collision when creating a security group with a generated name (bsc#1144357, bsc#1144358) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1974=1 Package List: - openSUSE Leap 15.1 (noarch): python3-ec2imgutils-7.0.5-lp151.2.3.1 References: https://bugzilla.suse.com/1144357 https://bugzilla.suse.com/1144358

1 0

openSUSE-RU-2019:1972-1: moderate: Recommended update for mksusecd
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for mksusecd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1972-1 Rating: moderate References: #1139561 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mksusecd fixes the following issues: - Embed gpg signature of checksum metadata into image. (bsc#1139561) - Add --enable-repos option. This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1972=1 Package List: - openSUSE Leap 15.1 (x86_64): mksusecd-1.69-lp151.2.3.1 mksusecd-debuginfo-1.69-lp151.2.3.1 mksusecd-debugsource-1.69-lp151.2.3.1 References: https://bugzilla.suse.com/1139561

1 0

openSUSE-RU-2019:1978-1: moderate: Recommended update for python3-susepubliccloudinfo
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for python3-susepubliccloudinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1978-1 Rating: moderate References: #1144100 #1144102 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for python3-susepubliccloudinfo fixes the following issues: - Added support for 'oracle' framework for images only (bsc#1144100, bsc#1144102) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1978=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1978=1 Package List: - openSUSE Leap 15.1 (noarch): python3-susepubliccloudinfo-1.2.1-lp151.2.3.1 - openSUSE Leap 15.0 (noarch): python3-susepubliccloudinfo-1.2.1-lp150.2.10.1 References: https://bugzilla.suse.com/1144100 https://bugzilla.suse.com/1144102

1 0

openSUSE-SU-2019:1968-1: moderate: Security update for libcryptopp
by opensuse-security＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Security Update: Security update for libcryptopp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1968-1 Rating: moderate References: #1143532 Cross-References: CVE-2019-14318 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcryptopp fixes the following issues: - CVE-2019-14318: Fixed a timing side channel vulnerability in the ECDSA signature generation (boo#1143532). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1968=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1968=1 - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1968=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1968=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libcryptopp-debugsource-5.6.5-lp151.3.3.1 libcryptopp-devel-5.6.5-lp151.3.3.1 libcryptopp5_6_5-5.6.5-lp151.3.3.1 libcryptopp5_6_5-debuginfo-5.6.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): libcryptopp5_6_5-32bit-5.6.5-lp151.3.3.1 libcryptopp5_6_5-32bit-debuginfo-5.6.5-lp151.3.3.1 - openSUSE Leap 15.0 (i586 x86_64): libcryptopp-debugsource-5.6.5-lp150.2.3.1 libcryptopp-devel-5.6.5-lp150.2.3.1 libcryptopp5_6_5-5.6.5-lp150.2.3.1 libcryptopp5_6_5-debuginfo-5.6.5-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libcryptopp5_6_5-32bit-5.6.5-lp150.2.3.1 libcryptopp5_6_5-32bit-debuginfo-5.6.5-lp150.2.3.1 - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libcryptopp-devel-5.6.5-bp151.4.3.1 libcryptopp5_6_5-5.6.5-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (aarch64_ilp32): libcryptopp5_6_5-64bit-5.6.5-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): libcryptopp-debugsource-5.6.5-bp150.3.3.1 libcryptopp-devel-5.6.5-bp150.3.3.1 libcryptopp5_6_5-5.6.5-bp150.3.3.1 libcryptopp5_6_5-debuginfo-5.6.5-bp150.3.3.1 - openSUSE Backports SLE-15 (aarch64_ilp32): libcryptopp5_6_5-64bit-5.6.5-bp150.3.3.1 libcryptopp5_6_5-64bit-debuginfo-5.6.5-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14318.html https://bugzilla.suse.com/1143532

1 0