August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1865-1: moderate: Recommended update for spec-cleaner
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1865-1 Rating: moderate References: #1099674 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spec-cleaner to version 1.1.4 fixes the following issues: - Exclude stuff from openstack macros (boo#1099674). - Replace 'http' with 'https' in URL (boo#1099674). - Replace legacy packageand() with 'and' expression (boo#1099674). - Replace pwdutils with shadow in Requires (boo#1099674). - Add openstack_cleanup_prep to bracketing excludes (boo#1099674). - Do not curlify yast_metainfo and yast_check (boo#1099674). - Fixup the eating of Source lines with whitespace (boo#1099674). - Document '#nospeccleaner' tag (boo#1099674). - Various small fixes (boo#1099674). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1865=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): spec-cleaner-1.1.4-bp151.3.3.1 spec-cleaner-format_spec_file-1.1.4-bp151.3.3.1 References: https://bugzilla.suse.com/1099674

1 0

openSUSE-RU-2019:1866-1: moderate: Recommended update for pure-ftpd
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for pure-ftpd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1866-1 Rating: moderate References: #1119187 #1136997 #547578 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for pure-ftpd fixes the following issues: - Add missing run-time dependency on system-user-ftp to ensure that user exits. [boo#1136997] - Add a configuration option that sets the process memory limit used by "ls" for globbing. The value can be specified as optional third argument to "-L" (or LimitRecursion in config file). Because it's optional, the old configuration files will still work without change with new binaries and update will be smooth. This change allows sites that store an extremely large set of files inside a single directory to tune their installation so that the "ls" command in that directory will succeed without exceeding the ftpd process memory limit. [boo#1119187] This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1866=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): pure-ftpd-1.0.47-bp151.6.3.1 References: https://bugzilla.suse.com/1119187 https://bugzilla.suse.com/1136997 https://bugzilla.suse.com/547578

1 0

openSUSE-RU-2019:1857-1: moderate: Recommended update for akonadi-server
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for akonadi-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1857-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for akonadi-server fixes the following issues: - Fixed a possible crash on exit (kde#401692) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1857=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): akonadi-server-18.12.3-bp151.4.3.1 akonadi-server-devel-18.12.3-bp151.4.3.1 akonadi-server-sqlite-18.12.3-bp151.4.3.1 libKF5AkonadiAgentBase5-18.12.3-bp151.4.3.1 libKF5AkonadiCore5-18.12.3-bp151.4.3.1 libKF5AkonadiPrivate5-18.12.3-bp151.4.3.1 libKF5AkonadiWidgets5-18.12.3-bp151.4.3.1 libKF5AkonadiXml5-18.12.3-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): akonadi-server-lang-18.12.3-bp151.4.3.1 References:

1 0

openSUSE-RU-2019:1706-1: moderate: Recommended update for habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1706-1 Rating: moderate References: #1137989 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for habootstrap-formula, python-shaptools, salt-shaptools, saphanabootstrap-formula fixes the following issues: Changes in saphanabootstrap-formula: - Create package version 0.2.1. (boo#1137989, jsc#SLE-4143) Changes in habootstrap-formula: - Create package version 0.2.1. (boo#1137989, jsc#SLE-4031) Changes in salt-shaptools: - Create package version 0.2.1. (jsc#SLE-4031, jsc#SLE-4143, boo#1137989) Changes in python-shaptools: - Create package version 0.2.1. (jsc#SLE-4031, jsc#SLE-4143, boo#1137989) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1706=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): habootstrap-formula-0.2.1-bp151.2.3 python2-shaptools-0.2.1-bp151.2.4 python3-shaptools-0.2.1-bp151.2.4 salt-shaptools-0.2.1-bp151.2.3 saphanabootstrap-formula-0.2.1-bp151.2.3 References: https://bugzilla.suse.com/1137989

1 0

openSUSE-RU-2019:1860-1: moderate: Recommended update for thunar
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for thunar ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1860-1 Rating: moderate References: #1134899 #1135362 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for thunar fixes the following issues: - Fixed crash on USB flash connection (boo#1135362) - Fixed "create document" sub-menu not showing any content (boo#1134899) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1860=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): libthunarx-3-0-1.8.4-bp151.3.3.1 thunar-1.8.4-bp151.3.3.1 thunar-devel-1.8.4-bp151.3.3.1 typelib-1_0-Thunarx-3_0-1.8.4-bp151.3.3.1 - openSUSE Backports SLE-15-SP1 (noarch): thunar-lang-1.8.4-bp151.3.3.1 References: https://bugzilla.suse.com/1134899 https://bugzilla.suse.com/1135362

1 0

openSUSE-SU-2019:1859-1: important: Security update for znc
by opensuse-security＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1859-1 Rating: important References: #1130360 #1138572 Cross-References: CVE-2019-12816 CVE-2019-9917 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for znc to version 1.7.4 fixes the following issues: Security issues fixed: - CVE-2019-12816: Fixed a remote code execution in Modules.cpp (boo#1138572). - CVE-2019-9917: Fixed a denial of service on invalid encoding (boo#1130360). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1859=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): znc-1.7.4-bp151.4.3.1 znc-devel-1.7.4-bp151.4.3.1 znc-perl-1.7.4-bp151.4.3.1 znc-python3-1.7.4-bp151.4.3.1 znc-tcl-1.7.4-bp151.4.3.1 - openSUSE Backports SLE-15-SP1 (noarch): znc-lang-1.7.4-bp151.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-12816.html https://www.suse.com/security/cve/CVE-2019-9917.html https://bugzilla.suse.com/1130360 https://bugzilla.suse.com/1138572

1 0

openSUSE-RU-2019:1856-1: moderate: Recommended update for git-review
by maintenance＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Recommended Update: Recommended update for git-review ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1856-1 Rating: moderate References: #1134089 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for git-review fixes the following issues: git-review was updated to 1.28.0 (boo#1134089): * Support for auto-configuration of topic names based on the presence of keywords in the commit message is removed. Previously, keywords such as bug, bp or lp followed by a number would result in branch names containing the associated number, e.g. bug/123. This feature was OpenStack specific, was a frequent source of bugs and clearly wasn’t being used that often, given that StoryBoard is a thing now and no one had updated this feature to handle that metadata. * Fixed usepushurl to work when a read-only mirror being used as origin does not contain refs/changes from gerrit. This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1856=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): git-review-1.28.0-bp151.4.3.1 References: https://bugzilla.suse.com/1134089

1 0

openSUSE-SU-2019:1861-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 14 Aug '19

14 Aug '19

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1861-1 Rating: moderate References: #1137496 #1137497 Cross-References: CVE-2019-11768 CVE-2019-12616 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for phpMyAdmin fixes the following issues: phpMyAdmin was updated to 4.9.0.1: * Several issues with SYSTEM VERSIONING tables * Fixed json encode error in export * Fixed JavaScript events not activating on input (sql bookmark issue) * Show Designer combo boxes when adding a constraint * Fix edit view * Fixed invalid default value for bit field * Fix several errors relating to GIS data types * Fixed javascript error PMA_messages is not defined * Fixed import XML data with leading zeros * Fixed php notice, added support for 'DELETE HISTORY' table privilege (MariaDB >= 10.3.4) * Fixed MySQL 8.0.0 issues with GIS display * Fixed "Server charset" in "Database server" tab showing wrong information * Fixed can not copy user on Percona Server 5.7 * Updated sql-parser to version 4.3.2, which fixes several parsing and linting problems - boo#1137497 / PMASA-2019-4 / CVE-2019-12616 / CWE-661: Fixed CSRF vulnerability in login form https://www.phpmyadmin.net/security/PMASA-2019-4/ - boo#1137496 / PMASA-2019-3 / CVE-2019-11768 / CWE-661: Fixed SQL injection in Designer feature https://www.phpmyadmin.net/security/PMASA-2019-3/ This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1861=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): phpMyAdmin-4.9.0.1-bp151.3.3.1 References: https://www.suse.com/security/cve/CVE-2019-11768.html https://www.suse.com/security/cve/CVE-2019-12616.html https://bugzilla.suse.com/1137496 https://bugzilla.suse.com/1137497

1 0

openSUSE-SU-2019:1855-1: important: Security update for kconfig, kdelibs4
by opensuse-security＠opensuse.org 13 Aug '19

13 Aug '19

openSUSE Security Update: Security update for kconfig, kdelibs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1855-1 Rating: important References: #1144600 Cross-References: CVE-2019-14744 Affected Products: openSUSE Backports SLE-15 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for kconfig, kdelibs4 fixes the following issues: - CVE-2019-14744: Fixed a command execution by an shell expansion (boo#1144600). This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-1855=1 Package List: - openSUSE Backports SLE-15 (aarch64 ppc64le s390x x86_64): kconf_update5-5.45.0-bp150.3.8.2 kconf_update5-debuginfo-5.45.0-bp150.3.8.2 kconfig-debugsource-5.45.0-bp150.3.8.2 kconfig-devel-5.45.0-bp150.3.8.2 kconfig-devel-debuginfo-5.45.0-bp150.3.8.2 kdelibs4-4.14.38-bp150.3.8.1 kdelibs4-branding-upstream-4.14.38-bp150.3.8.1 kdelibs4-core-4.14.38-bp150.3.8.1 kdelibs4-doc-4.14.38-bp150.3.8.1 libKF5ConfigCore5-5.45.0-bp150.3.8.2 libKF5ConfigCore5-debuginfo-5.45.0-bp150.3.8.2 libKF5ConfigGui5-5.45.0-bp150.3.8.2 libKF5ConfigGui5-debuginfo-5.45.0-bp150.3.8.2 libkde4-4.14.38-bp150.3.8.1 libkde4-devel-4.14.38-bp150.3.8.1 libkdecore4-4.14.38-bp150.3.8.1 libkdecore4-devel-4.14.38-bp150.3.8.1 libksuseinstall-devel-4.14.38-bp150.3.8.1 libksuseinstall1-4.14.38-bp150.3.8.1 - openSUSE Backports SLE-15 (aarch64_ilp32): kconfig-devel-64bit-5.45.0-bp150.3.8.2 kconfig-devel-64bit-debuginfo-5.45.0-bp150.3.8.2 libKF5ConfigCore5-64bit-5.45.0-bp150.3.8.2 libKF5ConfigCore5-64bit-debuginfo-5.45.0-bp150.3.8.2 libKF5ConfigGui5-64bit-5.45.0-bp150.3.8.2 libKF5ConfigGui5-64bit-debuginfo-5.45.0-bp150.3.8.2 libkde4-64bit-4.14.38-bp150.3.8.1 libkdecore4-64bit-4.14.38-bp150.3.8.1 libksuseinstall1-64bit-4.14.38-bp150.3.8.1 - openSUSE Backports SLE-15 (noarch): kdelibs4-apidocs-4.14.38-bp150.3.8.1 libKF5ConfigCore5-lang-5.45.0-bp150.3.8.2 References: https://www.suse.com/security/cve/CVE-2019-14744.html https://bugzilla.suse.com/1144600

1 0

openSUSE-RU-2019:1850-1: important: Recommended update for libgcrypt
by maintenance＠opensuse.org 13 Aug '19

13 Aug '19

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1850-1 Rating: important References: #1097073 #1133808 #1138939 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for libgcrypt fixes the following issues: Security issue fixed: - CVE-2019-12904: Fixed a flush-and-reload side-channel attack in the AES implementation (bsc#1138939). Non-security issues fixed: - Fixed a regression where system were unable to boot in fips mode, caused by an incomplete implementation of previous change (bsc#1097073). - Fixed redundant fips tests in some situations causing sudo to stop working when pam-kwallet is installed (bsc#1133808). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1850=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libgcrypt-cavs-1.8.2-lp151.9.4.1 libgcrypt-cavs-debuginfo-1.8.2-lp151.9.4.1 libgcrypt-debugsource-1.8.2-lp151.9.4.1 libgcrypt-devel-1.8.2-lp151.9.4.1 libgcrypt-devel-debuginfo-1.8.2-lp151.9.4.1 libgcrypt20-1.8.2-lp151.9.4.1 libgcrypt20-debuginfo-1.8.2-lp151.9.4.1 libgcrypt20-hmac-1.8.2-lp151.9.4.1 - openSUSE Leap 15.1 (x86_64): libgcrypt-devel-32bit-1.8.2-lp151.9.4.1 libgcrypt-devel-32bit-debuginfo-1.8.2-lp151.9.4.1 libgcrypt20-32bit-1.8.2-lp151.9.4.1 libgcrypt20-32bit-debuginfo-1.8.2-lp151.9.4.1 libgcrypt20-hmac-32bit-1.8.2-lp151.9.4.1 References: https://www.suse.com/security/cve/CVE-2019-12904.html https://bugzilla.suse.com/1097073 https://bugzilla.suse.com/1133808 https://bugzilla.suse.com/1138939

1 0