August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2037-1: moderate: Recommended update for mksusecd
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for mksusecd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2037-1 Rating: moderate References: #1000947 #1093145 #1097814 #1100236 #1139561 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for mksusecd fixes the following issues: - Embed gpg signature of checksum metadata into image. (bsc#1139561) - Set the default to unsigned images. - Add --enable-repos option. - Support aarch64 media. - No longer assume repo-md repositories don't include the installer. (bsc#1093145) - Adjust isozipl according to the changes of isoinfo. (bsc#1097814) - Don't miss zstd compression module. (bsc#1100236) - Keep some meta data for media checking even if the filesystem does not use iso9660. (bsc#1000947) - adjust to isoinfo and syslinux changes (bsc#1097814) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2037=1 Package List: - openSUSE Leap 15.0 (x86_64): mksusecd-1.69-lp150.7.1 mksusecd-debuginfo-1.69-lp150.7.1 mksusecd-debugsource-1.69-lp150.7.1 References: https://bugzilla.suse.com/1000947 https://bugzilla.suse.com/1093145 https://bugzilla.suse.com/1097814 https://bugzilla.suse.com/1100236 https://bugzilla.suse.com/1139561

1 0

openSUSE-SU-2019:2040-1: moderate: Security update for libmirage
by opensuse-security＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Security Update: Security update for libmirage ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2040-1 Rating: moderate References: #1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmirage fixes the following issues: CVE-2019-15540: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer overflow that could lead to root access by a local user. [boo#1148087] - Update to new upstream release 3.2.2 * ISO parser: fixed ISO9660/UDF pattern search for sector sizes 2332 and 2336. * ISO parser: added support for Nintendo GameCube and Wii ISO images. * Extended medium type guess to distinguish between DVD and BluRay images based on length. * Removed fabrication of disc structures from the library (moved to CDEmu daemon). * MDS parser: cleanup of disc structure parsing, fixed the incorrectly set structure sizes. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2040=1 Package List: - openSUSE Leap 15.0 (noarch): libmirage-data-3.2.2-lp150.2.3.1 libmirage-lang-3.2.2-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): libmirage-3_2-3.2.2-lp150.2.3.1 libmirage-3_2-debuginfo-3.2.2-lp150.2.3.1 libmirage-debuginfo-3.2.2-lp150.2.3.1 libmirage-debugsource-3.2.2-lp150.2.3.1 libmirage-devel-3.2.2-lp150.2.3.1 libmirage11-3.2.2-lp150.2.3.1 libmirage11-debuginfo-3.2.2-lp150.2.3.1 typelib-1_0-libmirage-3_2-3.2.2-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-15540.html https://bugzilla.suse.com/1148087

1 0

openSUSE-SU-2019:2038-1: moderate: Security update for flatpak
by opensuse-security＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Security Update: Security update for flatpak ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2038-1 Rating: moderate References: #1125431 #1133041 #1133043 Cross-References: CVE-2019-11460 CVE-2019-11461 CVE-2019-8308 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for flatpak fixes the following issues: Security issues fixed: - CVE-2019-8308: Fixed a potential sandbox escape via /proc (bsc#1125431). - CVE-2019-11460: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133043). - CVE-2019-11461: Fixed a compromised thumbnailer may escape the bubblewrap sandbox used to confine thumbnailers by using the TIOCSTI ioctl (bsc#1133041). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2038=1 Package List: - openSUSE Leap 15.0 (x86_64): flatpak-0.10.4-lp150.8.1 flatpak-debuginfo-0.10.4-lp150.8.1 flatpak-debugsource-0.10.4-lp150.8.1 flatpak-devel-0.10.4-lp150.8.1 libflatpak0-0.10.4-lp150.8.1 libflatpak0-debuginfo-0.10.4-lp150.8.1 typelib-1_0-Flatpak-1_0-0.10.4-lp150.8.1 References: https://www.suse.com/security/cve/CVE-2019-11460.html https://www.suse.com/security/cve/CVE-2019-11461.html https://www.suse.com/security/cve/CVE-2019-8308.html https://bugzilla.suse.com/1125431 https://bugzilla.suse.com/1133041 https://bugzilla.suse.com/1133043

1 0

openSUSE-SU-2019:2039-1: important: Security update for python-SQLAlchemy
by opensuse-security＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Security Update: Security update for python-SQLAlchemy ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2039-1 Rating: important References: #1124593 Cross-References: CVE-2019-7164 CVE-2019-7548 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python-SQLAlchemy fixes the following issues: Security issues fixed: - CVE-2019-7164: Fixed SQL Injection via the order_by parameter (bsc#1124593). - CVE-2019-7548: Fixed SQL Injection via the group_by parameter (bsc#1124593). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2039=1 Package List: - openSUSE Leap 15.0 (noarch): python-SQLAlchemy-doc-1.2.7-lp150.2.3.1 - openSUSE Leap 15.0 (x86_64): python-SQLAlchemy-debuginfo-1.2.7-lp150.2.3.1 python-SQLAlchemy-debugsource-1.2.7-lp150.2.3.1 python2-SQLAlchemy-1.2.7-lp150.2.3.1 python2-SQLAlchemy-debuginfo-1.2.7-lp150.2.3.1 python3-SQLAlchemy-1.2.7-lp150.2.3.1 python3-SQLAlchemy-debuginfo-1.2.7-lp150.2.3.1 References: https://www.suse.com/security/cve/CVE-2019-7164.html https://www.suse.com/security/cve/CVE-2019-7548.html https://bugzilla.suse.com/1124593

1 0

openSUSE-RU-2019:2036-1: moderate: Recommended update for yast2-proxy
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for yast2-proxy ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2036-1 Rating: moderate References: #1140199 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-proxy fixes the following issues: - Fix 'proxy' behaviour when running in firstboot (bsc#1140199) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2036=1 Package List: - openSUSE Leap 15.0 (noarch): yast2-proxy-4.0.3-lp150.2.10.1 References: https://bugzilla.suse.com/1140199

1 0

openSUSE-RU-2019:2034-1: moderate: Recommended update for lifelines
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for lifelines ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2034-1 Rating: moderate References: #1146704 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lifelines fixes the following issues: - Update to lifelines git version 3ad4571, which is the follower of lifelines version 3.1.1 (bug boo#1146704) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2034=1 Package List: - openSUSE Leap 15.1 (x86_64): lifelines-3.1.1+3ad4571-lp151.3.3.1 lifelines-debuginfo-3.1.1+3ad4571-lp151.3.3.1 lifelines-debugsource-3.1.1+3ad4571-lp151.3.3.1 References: https://bugzilla.suse.com/1146704

1 0

openSUSE-RU-2019:2035-1: moderate: Recommended update for yast2
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2035-1 Rating: moderate References: #1093052 #1113732 #1128032 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Stop "ls: write error: Broken pipe" messages. (bsc#1128032) - Choose SuSEfirewall2 as default if no firewall has been installed. (bsc#1093052) - Added more testcases if e.g. system is running in chroot environment and systemd does not work properly (bsc#1113732) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2035=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): yast2-4.0.104-lp150.2.16.1 References: https://bugzilla.suse.com/1093052 https://bugzilla.suse.com/1113732 https://bugzilla.suse.com/1128032

1 0

openSUSE-SU-2019:2033-1: moderate: Security update for libmirage
by opensuse-security＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Security Update: Security update for libmirage ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2033-1 Rating: moderate References: #1148087 Cross-References: CVE-2019-15540 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmirage fixes the following issues: CVE-2019-15540: The CSO filter in libMirage in CDemu did not validate the part size, triggering a heap-based buffer overflow that could lead to root access by a local user. [boo#1148087] - Update to new upstream release 3.2.2 * ISO parser: fixed ISO9660/UDF pattern search for sector sizes 2332 and 2336. * ISO parser: added support for Nintendo GameCube and Wii ISO images. * Extended medium type guess to distinguish between DVD and BluRay images based on length. * Removed fabrication of disc structures from the library (moved to CDEmu daemon). * MDS parser: cleanup of disc structure parsing, fixed the incorrectly set structure sizes. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2033=1 Package List: - openSUSE Leap 15.1 (x86_64): libmirage-3_2-3.2.2-lp151.3.3.1 libmirage-3_2-debuginfo-3.2.2-lp151.3.3.1 libmirage-debuginfo-3.2.2-lp151.3.3.1 libmirage-debugsource-3.2.2-lp151.3.3.1 libmirage-devel-3.2.2-lp151.3.3.1 libmirage11-3.2.2-lp151.3.3.1 libmirage11-debuginfo-3.2.2-lp151.3.3.1 typelib-1_0-libmirage-3_2-3.2.2-lp151.3.3.1 - openSUSE Leap 15.1 (noarch): libmirage-data-3.2.2-lp151.3.3.1 libmirage-lang-3.2.2-lp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-15540.html https://bugzilla.suse.com/1148087

1 0

openSUSE-RU-2019:2026-1: moderate: Recommended update for clementine
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for clementine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2026-1 Rating: moderate References: #1138261 #1141444 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for clementine fixes the following issues: - Fix a clementine crash and memory leak (boo#1138261) - Fix many memory leaks (boo#1141444) This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2026=1 Package List: - openSUSE Backports SLE-15-SP1 (x86_64): clementine-1.3.1-bp151.4.6.1 References: https://bugzilla.suse.com/1138261 https://bugzilla.suse.com/1141444

1 0

openSUSE-RU-2019:2028-1: moderate: Recommended update for mate-menus
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for mate-menus ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2028-1 Rating: moderate References: #1144346 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mate-menus fixes the following issues: - Fix a crash of mate-menu due to a missing symbol (boo#1144346) Remove subpackages: * python2-mate-menus and python-mate-menus: dropped in patch series, mate-menus examples go to the devel subpackage Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2028=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmate-menu2-1.20.0-lp151.3.5.1 libmate-menu2-debuginfo-1.20.0-lp151.3.5.1 mate-menus-1.20.0-lp151.3.5.1 mate-menus-debugsource-1.20.0-lp151.3.5.1 mate-menus-devel-1.20.0-lp151.3.5.1 typelib-1_0-MateMenu-2_0-1.20.0-lp151.3.5.1 - openSUSE Leap 15.1 (noarch): mate-menus-branding-upstream-1.20.0-lp151.3.5.1 mate-menus-lang-1.20.0-lp151.3.5.1 - openSUSE Leap 15.1 (x86_64): libmate-menu2-32bit-1.20.0-lp151.3.5.1 libmate-menu2-32bit-debuginfo-1.20.0-lp151.3.5.1 References: https://bugzilla.suse.com/1144346

1 0

openSUSE-RU-2019:2032-1: moderate: Recommended update for sddm
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2032-1 Rating: moderate References: #1025387 #1069396 #1101297 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sddm fixes the following issues: - Add SLE branding package for PackageHub (boo#1101297) - Change the Supplements of branding packages, so they get installed when sddm and the respective branding package is installed. Also added a Supplements to sddm so it gets recommended when plasma5-workspace is installed. - Provide a sddm-branding-SLE package with correct dependencies, together with sddm-branding-openSUSE (boo#1025387, boo#1069396) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2032=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2032=1 - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2032=1 Package List: - openSUSE Leap 15.1 (x86_64): sddm-0.18.0-lp151.3.3.1 sddm-branding-openSUSE-0.18.0-lp151.3.3.1 sddm-branding-upstream-0.18.0-lp151.3.3.1 sddm-debuginfo-0.18.0-lp151.3.3.1 sddm-debugsource-0.18.0-lp151.3.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): sddm-0.17.0-bp150.9.10.1 sddm-branding-SLE-0.17.0-bp150.9.10.1 sddm-branding-openSUSE-0.17.0-bp150.9.10.1 sddm-branding-upstream-0.17.0-bp150.9.10.1 sddm-debuginfo-0.17.0-bp150.9.10.1 sddm-debugsource-0.17.0-bp150.9.10.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sddm-0.14.0-5.1 sddm-branding-SLE-0.14.0-5.1 sddm-branding-openSUSE-0.14.0-5.1 sddm-branding-upstream-0.14.0-5.1 sddm-debuginfo-0.14.0-5.1 sddm-debugsource-0.14.0-5.1 References: https://bugzilla.suse.com/1025387 https://bugzilla.suse.com/1069396 https://bugzilla.suse.com/1101297

1 0

openSUSE-RU-2019:2030-1: moderate: Recommended update for openvswitch
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2030-1 Rating: moderate References: #1132029 #1138948 #1139798 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for openvswitch contains the following changes: - fixes a permission error on logrotating (bsc#1132029, bsc#1139798) - This version update to 2.11.1 for openvswitch includes many minor bug fixes (Please refer to the rpm changelog file to see the full list) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2030=1 Package List: - openSUSE Leap 15.1 (noarch): openvswitch-doc-2.11.1-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): libopenvswitch-2_11-0-2.11.1-lp151.2.3.1 libopenvswitch-2_11-0-debuginfo-2.11.1-lp151.2.3.1 openvswitch-2.11.1-lp151.2.3.1 openvswitch-debuginfo-2.11.1-lp151.2.3.1 openvswitch-debugsource-2.11.1-lp151.2.3.1 openvswitch-devel-2.11.1-lp151.2.3.1 openvswitch-ipsec-2.11.1-lp151.2.3.1 openvswitch-ovn-central-2.11.1-lp151.2.3.1 openvswitch-ovn-central-debuginfo-2.11.1-lp151.2.3.1 openvswitch-ovn-common-2.11.1-lp151.2.3.1 openvswitch-ovn-common-debuginfo-2.11.1-lp151.2.3.1 openvswitch-ovn-docker-2.11.1-lp151.2.3.1 openvswitch-ovn-host-2.11.1-lp151.2.3.1 openvswitch-ovn-host-debuginfo-2.11.1-lp151.2.3.1 openvswitch-ovn-vtep-2.11.1-lp151.2.3.1 openvswitch-ovn-vtep-debuginfo-2.11.1-lp151.2.3.1 openvswitch-pki-2.11.1-lp151.2.3.1 openvswitch-test-2.11.1-lp151.2.3.1 openvswitch-test-debuginfo-2.11.1-lp151.2.3.1 openvswitch-vtep-2.11.1-lp151.2.3.1 openvswitch-vtep-debuginfo-2.11.1-lp151.2.3.1 python2-ovs-2.11.1-lp151.2.3.1 python2-ovs-debuginfo-2.11.1-lp151.2.3.1 python3-ovs-2.11.1-lp151.2.3.1 python3-ovs-debuginfo-2.11.1-lp151.2.3.1 References: https://bugzilla.suse.com/1132029 https://bugzilla.suse.com/1138948 https://bugzilla.suse.com/1139798

1 0

openSUSE-RU-2019:2031-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2031-1 Rating: moderate References: #1032511 #1127716 #1130122 #1133866 #1135317 #1136712 #1140519 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - scheduler: wait for probe actions to complete to prevent unnecessary restart/re-promote of dependent resources (bsc#1130122, bsc#1032511) - The --help option of stonith_admin defines now the usage of --cleanup (bsc#1135317) - controller: confirm cancel of failed monitors (bsc#1133866) - libcrmcommon: returns an error when applying XML diffs containing unknown operations (bsc#1127716) - libcrmcommon: avoids now a possible use-of-NULL when applying XML diffs (bsc#1127716) - libcrmcommon: correctly apply XML diffs with multiple move/create changes (bsc#1127716) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2031=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libpacemaker-devel-2.0.1+20190417.13d370ca9-lp151.2.3.1 libpacemaker3-2.0.1+20190417.13d370ca9-lp151.2.3.1 libpacemaker3-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-cli-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-cli-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-debugsource-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-remote-2.0.1+20190417.13d370ca9-lp151.2.3.1 pacemaker-remote-debuginfo-2.0.1+20190417.13d370ca9-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): pacemaker-cts-2.0.1+20190417.13d370ca9-lp151.2.3.1 References: https://bugzilla.suse.com/1032511 https://bugzilla.suse.com/1127716 https://bugzilla.suse.com/1130122 https://bugzilla.suse.com/1133866 https://bugzilla.suse.com/1135317 https://bugzilla.suse.com/1136712 https://bugzilla.suse.com/1140519

1 0

openSUSE-RU-2019:2027-1: moderate: Recommended update for python-bleach, python-translation-finder, translate-toolkit
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for python-bleach, python-translation-finder, translate-toolkit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2027-1 Rating: moderate References: #1142582 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-bleach, python-translation-finder, python-pycountry, translate-toolkit fixes the following issues: Changes in translate-toolkit: - Update to 2.4.0: * Added new Flat XML format and converters. * Fixes for multiple formats. Changes in python-pycountry: - Version update to 18.12.8 - Switch API from "get + KeyError" to " get + default=None". This is a subtle API-breaking change. Please update carefully. (#13416) - Update to iso-codes 4.1. - Fix #13394: incorrect KeyError shadowing in Subdivisions.get() - Fix #13398: make lazy loading thread-safe. Changes in python-translation-finder: - Update to 1.6 boo#1142582: * Improved discovery of POT files. * Added support for subtitle files supported in Weblate 3.7. * Improved detection of actual JSON formats. * Added support for detecting PHP files. * Improved detection of YAML formats. - Update to 1.5: * Various performance improvements. * Added detection of Fluent translations. * Improved detection of language code within filename. * Added detection of YAML translations. - version update to 1.4 * Improved detection in Perl code. * Extended skip list for language codes. * Improved detection of nested language codes with country suffix. * Improved processing of Transifex .tx/config files. * Include discovery metadata in API results. * Improve detection of files in source directory. * Fixed discovery of monolingual files in root. * Improved detection of non language paths. Changes in python-bleach: - Restrict pytest to less than 5.0; upstream has an issue already reported - Avoid new vendoring of html5lib in v3.1.0 - Remove direct dependency on webencodings, a dependency of html5lib - Update to v3.1.0 * Add ``recognized_tags`` argument to the linkify ``Linker`` class. This fixes issues when linkifying on its own and having some tags get escaped. It defaults to a list of HTML5 tags * Fix cases where attribute names could have invalid characters in them. * Fix problems with ``LinkifyFilter`` not being able to match links across amps. * Fix ``InputStreamWithMemory`` when the ``BleachHTMLParser`` is parsing ``meta`` tags * Fix doctests. - from v3.0.2 * Merge ``Characters`` tokens after sanitizing them. This fixes issues in the ``LinkifyFilter`` where it was only linkifying parts of urls - from v3.0.1 * Support Python 3.7. It supported Python 3.7 just fine, but 3.7 was added to the list of Python environments being test * Fix ``list`` object has no attribute ``lower`` in ``clean`` * Fix ``abbr`` getting escaped in ``linkify`` - from v3.0.0 * [breaking] A bunch of functions were moved from one module to another. These were moved from ``bleach.sanitizer`` to ``bleach.html5lib_shim``: + convert_entity + convert_entities + match_entity + next_possible_entity + BleachHTMLSerializer + BleachHTMLTokenizer + BleachHTMLParser These functions and classes weren't documented and aren't part of the public API, but people read code and might be using them so we're considering it an incompatible API change. If you're using them, you'll need to update your code. * Bleach no longer depends on html5lib. html5lib==1.0.1 is now vendored into Bleach. You can remove it from your requirements file if none of your other requirements require html5lib. This means Bleach will now work fine with other libraries that depend on html5lib regardless of what version of html5lib they require. * Fixed tags getting added when using clean or linkify. This was a long-standing regression from the Bleach 2.0 rewrite - from v2.1.4 * Dropped support for Python 3.3 * Handle ambiguous ampersands in correctly - Trim rhetorics and bias from descriptions. - Remove superfluous devel dependency for noarch package Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2027=1 Package List: - openSUSE Leap 15.1 (noarch): python2-bleach-3.1.0-lp151.3.3.1 python2-cheroot-6.5.5-lp151.3.3.1 python2-pycountry-18.12.8-lp151.3.3.1 python2-requests-unixsocket-0.1.5-lp151.2.1 python2-translation-finder-1.6-lp151.2.3.1 python3-bleach-3.1.0-lp151.3.3.1 python3-cheroot-6.5.5-lp151.3.3.1 python3-pycountry-18.12.8-lp151.3.3.1 python3-requests-unixsocket-0.1.5-lp151.2.1 python3-translation-finder-1.6-lp151.2.3.1 translate-toolkit-2.4.0-lp151.2.3.6 translate-toolkit-devel-doc-2.4.0-lp151.2.3.6 References: https://bugzilla.suse.com/1142582

1 0

openSUSE-RU-2019:2029-1: moderate: Recommended update for yast2-instserver
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for yast2-instserver ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2029-1 Rating: moderate References: #1141963 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-instserver contains the following fixes: - Do not crash when starting the Installation Server. (bsc#1141963) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2029=1 Package List: - openSUSE Leap 15.1 (noarch): yast2-instserver-4.1.6-lp151.2.3.1 References: https://bugzilla.suse.com/1141963

1 0

openSUSE-RU-2019:2032-1: moderate: Recommended update for sddm
by maintenance＠opensuse.org 31 Aug '19

31 Aug '19

openSUSE Recommended Update: Recommended update for sddm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2032-1 Rating: moderate References: #1025387 #1069396 #1101297 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sddm fixes the following issues: - Add SLE branding package for PackageHub (boo#1101297) - Change the Supplements of branding packages, so they get installed when sddm and the respective branding package is installed. Also added a Supplements to sddm so it gets recommended when plasma5-workspace is installed. - Provide a sddm-branding-SLE package with correct dependencies, together with sddm-branding-openSUSE (boo#1025387, boo#1069396) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2019-2032=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sddm-0.14.0-5.1 sddm-branding-SLE-0.14.0-5.1 sddm-branding-openSUSE-0.14.0-5.1 sddm-branding-upstream-0.14.0-5.1 sddm-debuginfo-0.14.0-5.1 sddm-debugsource-0.14.0-5.1 References: https://bugzilla.suse.com/1025387 https://bugzilla.suse.com/1069396 https://bugzilla.suse.com/1101297

1 0

openSUSE-RU-2019:2025-1: moderate: Recommended update for installation-images
by maintenance＠opensuse.org 30 Aug '19

30 Aug '19

openSUSE Recommended Update: Recommended update for installation-images ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2025-1 Rating: moderate References: #1040492 #1095289 #1095796 #1099327 #1103208 #1106114 #1108005 #1108289 #1108905 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for installation-images fixes the following issues: - adjust to glibc-locale package split - aarch64: add gpio-thunderx.ko module (bsc#1106114) - adjust to iptables using update-alternatives (bsc#1108289) - Make monitor miror mode during installation the default again (bsc#1108905) - Add ptp_qoriq to module.config - add bcache-tools to installation initrd (fate#325346) - Fix rpi file list - hdimage: Use at least FAT16 - add raspberry pi firmware files - get leap version from %sle_version macro (bsc#1103208) - etc: update module.config to match 4.18 - add pinctrl-* modules (bsc#1095796) - add bcm43xx-firmware (bsc#1099327) - Tidy module.config comment notes - Add mailbox modules (bsc#1040492) - include all kernel input modules (bsc#1095289) - etc: update module.config to match 4.17 This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2025=1 Package List: - openSUSE Leap 15.0 (x86_64): install-initrd-openSUSE-14.385-lp150.7.1 installation-images-debuginfodeps-openSUSE-14.385-lp150.7.1 installation-images-openSUSE-14.385-lp150.7.1 skelcd-installer-net-openSUSE-14.385-lp150.7.1 skelcd-installer-openSUSE-14.385-lp150.7.1 - openSUSE Leap 15.0 (noarch): tftpboot-installation-openSUSE-Leap-15.0-x86_64-14.385-lp150.7.1 References: https://bugzilla.suse.com/1040492 https://bugzilla.suse.com/1095289 https://bugzilla.suse.com/1095796 https://bugzilla.suse.com/1099327 https://bugzilla.suse.com/1103208 https://bugzilla.suse.com/1106114 https://bugzilla.suse.com/1108005 https://bugzilla.suse.com/1108289 https://bugzilla.suse.com/1108905

1 0

openSUSE-SU-2019:2024-1: moderate: Security update for qbittorrent
by opensuse-security＠opensuse.org 30 Aug '19

30 Aug '19

openSUSE Security Update: Security update for qbittorrent ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2024-1 Rating: moderate References: #1141967 Cross-References: CVE-2019-13640 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for qbittorrent fixes the following issues: - CVE-2019-13640: avoid command injection (boo#1141967) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2024=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): qbittorrent-4.1.5-bp151.3.3.1 qbittorrent-nox-4.1.5-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-13640.html https://bugzilla.suse.com/1141967

1 0

openSUSE-RU-2019:2023-1: moderate: Recommended update for obs-service-tar_scm
by maintenance＠opensuse.org 30 Aug '19

30 Aug '19

openSUSE Recommended Update: Recommended update for obs-service-tar_scm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2023-1 Rating: moderate References: #1138377 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for obs-service-tar_scm fixes the following issues: - Fixes that osc service does not run under german locale (bsc#1138377) obs-service-tar_scm was updated to version 0.10.9.1559745964.22c86cd: * [dist] python3 for SLE12 and openSUSE 42.3 * [dist] enable python3 in SLE >= 12 * fix encoding error for surrogates * glibc-common was used up to FC23 and RHEL7 * Compile python files before install * change order in GNUMakefile to prefer python3 * More thorought spec file cleanup * predefine python version in spec file for GNUMAkefile * [dist] spec file: python3 only and multidist * Git also uses the LANGUAGE variable * centos_version and rhel_version are triple digits * Minimize diff with the version in openSUSE:Tools * Fix the logic to pick the locale package on Fedora * Forgot the guard 0 in one conditional * Require packages to get the en_US.UTF-8 locales * enforce bytes for cpio file list This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2023=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): obs-service-appimage-0.10.9.1559745964.22c86cd-bp151.2.3.1 obs-service-obs_scm-0.10.9.1559745964.22c86cd-bp151.2.3.1 obs-service-obs_scm-common-0.10.9.1559745964.22c86cd-bp151.2.3.1 obs-service-snapcraft-0.10.9.1559745964.22c86cd-bp151.2.3.1 obs-service-tar-0.10.9.1559745964.22c86cd-bp151.2.3.1 obs-service-tar_scm-0.10.9.1559745964.22c86cd-bp151.2.3.1 References: https://bugzilla.suse.com/1138377

1 0

openSUSE-RU-2019:2022-1: moderate: Recommended update for obs-service-tar_scm
by maintenance＠opensuse.org 29 Aug '19

29 Aug '19

openSUSE Recommended Update: Recommended update for obs-service-tar_scm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2022-1 Rating: moderate References: #1138377 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for obs-service-tar_scm fixes the following issues: - Fixes that osc service does not run under german locale (bsc#1138377) obs-service-tar_scm was updated to version 0.10.9.1559745964.22c86cd: * [dist] python3 for SLE12 and openSUSE 42.3 * [dist] enable python3 in SLE >= 12 * fix encoding error for surrogates * glibc-common was used up to FC23 and RHEL7 * Compile python files before install * change order in GNUMakefile to prefer python3 * More thorought spec file cleanup * predefine python version in spec file for GNUMAkefile * [dist] spec file: python3 only and multidist * Git also uses the LANGUAGE variable * centos_version and rhel_version are triple digits * Minimize diff with the version in openSUSE:Tools * Fix the logic to pick the locale package on Fedora * Forgot the guard 0 in one conditional * Require packages to get the en_US.UTF-8 locales * enforce bytes for cpio file list This update was imported from the SUSE:SLE-15:Update update project. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2022=1 Package List: - openSUSE Backports SLE-15 (noarch): obs-service-appimage-0.10.9.1559745964.22c86cd-bp150.3.6.1 obs-service-obs_scm-0.10.9.1559745964.22c86cd-bp150.3.6.1 obs-service-obs_scm-common-0.10.9.1559745964.22c86cd-bp150.3.6.1 obs-service-snapcraft-0.10.9.1559745964.22c86cd-bp150.3.6.1 obs-service-tar-0.10.9.1559745964.22c86cd-bp150.3.6.1 obs-service-tar_scm-0.10.9.1559745964.22c86cd-bp150.3.6.1 References: https://bugzilla.suse.com/1138377

1 0

openSUSE-RU-2019:2020-1: important: Recommended update for kernel-firmware
by maintenance＠opensuse.org 29 Aug '19

29 Aug '19

openSUSE Recommended Update: Recommended update for kernel-firmware ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2020-1 Rating: important References: #1143331 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kernel-firmware fixes the following issues: - Reverts a patch which has caused systems to hang during booting in specific scenarios (bsc#1143331) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2020=1 Package List: - openSUSE Leap 15.0 (noarch): kernel-firmware-20190618-lp150.2.22.1 ucode-amd-20190618-lp150.2.22.1 References: https://bugzilla.suse.com/1143331

1 0

openSUSE-SU-2019:2021-1: important: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork
by opensuse-security＠opensuse.org 29 Aug '19

29 Aug '19

openSUSE Security Update: Security update for containerd, docker, docker-runc, golang-github-docker-libnetwork ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2021-1 Rating: important References: #1100331 #1121967 #1138920 #1139649 #1142160 #1142413 #1143409 Cross-References: CVE-2018-10892 CVE-2019-13509 CVE-2019-14271 CVE-2019-5736 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves four vulnerabilities and has three fixes is now available. Description: This update for containerd, docker, docker-runc, golang-github-docker-libnetwork fixes the following issues: Docker: - CVE-2019-14271: Fixed a code injection if the nsswitch facility dynamically loaded a library inside a chroot (bsc#1143409). - CVE-2019-13509: Fixed an information leak in the debug log (bsc#1142160). - Update to version 19.03.1-ce, see changelog at /usr/share/doc/packages/docker/CHANGELOG.md (bsc#1142413, bsc#1139649). runc: - Use %config(noreplace) for /etc/docker/daemon.json (bsc#1138920). - Update to runc 425e105d5a03, which is required by Docker (bsc#1139649). containerd: - CVE-2019-5736: Fixed a container breakout vulnerability (bsc#1121967). - Update to containerd v1.2.6, which is required by docker (bsc#1139649). golang-github-docker-libnetwork: - Update to version git.fc5a7d91d54cc98f64fc28f9e288b46a0bee756c, which is required by docker (bsc#1142413, bsc#1139649). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2021=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2021=1 Package List: - openSUSE Leap 15.1 (x86_64): containerd-1.2.6-lp151.2.6.1 containerd-ctr-1.2.6-lp151.2.6.1 docker-19.03.1_ce-lp151.2.12.1 docker-debuginfo-19.03.1_ce-lp151.2.12.1 docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1 docker-runc-1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1 docker-runc-debuginfo-1.0.0rc8+gitr3826_425e105d5a03-lp151.3.6.1 docker-test-19.03.1_ce-lp151.2.12.1 docker-test-debuginfo-19.03.1_ce-lp151.2.12.1 golang-github-docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): docker-bash-completion-19.03.1_ce-lp151.2.12.1 docker-zsh-completion-19.03.1_ce-lp151.2.12.1 - openSUSE Leap 15.0 (x86_64): containerd-1.2.6-lp150.4.17.1 containerd-ctr-1.2.6-lp150.4.17.1 docker-19.03.1_ce-lp150.5.27.1 docker-debuginfo-19.03.1_ce-lp150.5.27.1 docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-lp150.3.18.1 docker-libnetwork-debuginfo-0.7.0.1+gitr2800_fc5a7d91d54c-lp150.3.18.1 docker-runc-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.25.1 docker-runc-debuginfo-1.0.0rc8+gitr3826_425e105d5a03-lp150.5.25.1 docker-test-19.03.1_ce-lp150.5.27.1 docker-test-debuginfo-19.03.1_ce-lp150.5.27.1 golang-github-docker-libnetwork-0.7.0.1+gitr2800_fc5a7d91d54c-lp150.3.18.1 - openSUSE Leap 15.0 (noarch): docker-bash-completion-19.03.1_ce-lp150.5.27.1 docker-zsh-completion-19.03.1_ce-lp150.5.27.1 References: https://www.suse.com/security/cve/CVE-2018-10892.html https://www.suse.com/security/cve/CVE-2019-13509.html https://www.suse.com/security/cve/CVE-2019-14271.html https://www.suse.com/security/cve/CVE-2019-5736.html https://bugzilla.suse.com/1100331 https://bugzilla.suse.com/1121967 https://bugzilla.suse.com/1138920 https://bugzilla.suse.com/1139649 https://bugzilla.suse.com/1142160 https://bugzilla.suse.com/1142413 https://bugzilla.suse.com/1143409

1 0

openSUSE-SU-2019:2019-1: important: Security update for schismtracker
by opensuse-security＠opensuse.org 29 Aug '19

29 Aug '19

openSUSE Security Update: Security update for schismtracker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2019-1 Rating: important References: #1144261 #1144266 Cross-References: CVE-2019-14523 CVE-2019-14524 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for schismtracker fixes the following issues: The following security issues were fixed: - CVE-2019-14523: Fixed an integer underflow in the Amiga Oktalyzer parser (boo#1144266). - CVE-2019-14524: Fixed a heap overflow in the MTM loader (boo#1144261). The following non-security issues were fixed: - Support 15-channel MOD files. - Support undocumented MIDI macro characters, and support character p (MIDI program) properly. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2019=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2019=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): schismtracker-20190805-bp151.4.3.1 schismtracker-debuginfo-20190805-bp151.4.3.1 schismtracker-debugsource-20190805-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): schismtracker-20190805-bp150.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-14523.html https://www.suse.com/security/cve/CVE-2019-14524.html https://bugzilla.suse.com/1144261 https://bugzilla.suse.com/1144266

1 0

openSUSE-RU-2019:2018-1: moderate: Recommended update for skiboot
by maintenance＠opensuse.org 27 Aug '19

27 Aug '19

openSUSE Recommended Update: Recommended update for skiboot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2018-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for skiboot fixes the following issues: skiboot was updated to 5.10.7: - NPU2 HMIs: dump out a *LOT* of npu2 registers for debugging - libflash/blocklevel: Correct miscalculation in blocklevel_smart_erase() - Tie tm-suspend fw-feature and opal_reinit_cpus() together - NPU2: dump NPU2 registers on npu2 HMI - npu2: Add performance tuning SCOM inits - hw/npu2: Assign a unique LPARSHORTID per GPU - occ: Set up OCC messaging even if we fail to setup pstates - core/fast-reboot: disable fast reboot upon fundamental entry/exit/locking errors - core/opal: allow some re-entrant calls - core/opal: abort in case of re-entrant OPAL call - npu2: Disable fast reboot - xive: disable store EOI support - npu2/hw-procedures: fence bricks on GPU reset - hdata/spira: parse vpd to add part-number and serial-number to xscom@ node - hw/imc: Check for pause_microcode_at_boot() return status - core/cpufeatures: Fix setting DARN and SCV HWCAP feature bits - opal-prd: Do not error out on first failure for soft/hard offline. - xive: fix missing unlock in error path - OPAL_PCI_SET_POWER_STATE: fix locking in error paths - libffs: Fix string truncation gcc warning. - hdata/i2c.c: fix building with gcc8 - opal-prd: Fix opal-prd crash This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2018=1 Package List: - openSUSE Backports SLE-15 (ppc64le): opal-prd-5.10.7-bp150.2.9.1 opal-utils-5.10.7-bp150.2.9.1 References:

1 0

openSUSE-SU-2019:2017-1: moderate: Recommended update for putty
by opensuse-security＠opensuse.org 26 Aug '19

26 Aug '19

openSUSE Security Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2017-1 Rating: moderate References: #1144547 #1144548 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for putty fixes the following issues: Update to new upstream release 0.72 [boo#1144547, boo#1144548] * Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. * Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant. * Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2017=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2017=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): putty-0.72-bp151.4.3.1 putty-debuginfo-0.72-bp151.4.3.1 putty-debugsource-0.72-bp151.4.3.1 - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): putty-0.72-bp150.4.9.1 References: https://bugzilla.suse.com/1144547 https://bugzilla.suse.com/1144548

1 0