August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1991-1: moderate: Recommended update for mariadb
by maintenance＠opensuse.org 23 Aug '19

23 Aug '19

openSUSE Recommended Update: Recommended update for mariadb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1991-1 Rating: moderate References: #1143215 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mariadb fixes the following issues: - mysql-systemd-helper will now check for ping responses and the pid in a process list - this fixes the "found left-over process" issue when regular mariadb is started (bsc#1143215) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1991=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1991=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libmysqld-devel-10.2.25-lp151.2.6.1 libmysqld19-10.2.25-lp151.2.6.1 libmysqld19-debuginfo-10.2.25-lp151.2.6.1 mariadb-10.2.25-lp151.2.6.1 mariadb-bench-10.2.25-lp151.2.6.1 mariadb-bench-debuginfo-10.2.25-lp151.2.6.1 mariadb-client-10.2.25-lp151.2.6.1 mariadb-client-debuginfo-10.2.25-lp151.2.6.1 mariadb-debuginfo-10.2.25-lp151.2.6.1 mariadb-debugsource-10.2.25-lp151.2.6.1 mariadb-galera-10.2.25-lp151.2.6.1 mariadb-test-10.2.25-lp151.2.6.1 mariadb-test-debuginfo-10.2.25-lp151.2.6.1 mariadb-tools-10.2.25-lp151.2.6.1 mariadb-tools-debuginfo-10.2.25-lp151.2.6.1 - openSUSE Leap 15.1 (noarch): mariadb-errormessages-10.2.25-lp151.2.6.1 - openSUSE Leap 15.0 (i586 x86_64): libmysqld-devel-10.2.25-lp150.2.16.1 libmysqld19-10.2.25-lp150.2.16.1 libmysqld19-debuginfo-10.2.25-lp150.2.16.1 mariadb-10.2.25-lp150.2.16.1 mariadb-bench-10.2.25-lp150.2.16.1 mariadb-bench-debuginfo-10.2.25-lp150.2.16.1 mariadb-client-10.2.25-lp150.2.16.1 mariadb-client-debuginfo-10.2.25-lp150.2.16.1 mariadb-debuginfo-10.2.25-lp150.2.16.1 mariadb-debugsource-10.2.25-lp150.2.16.1 mariadb-galera-10.2.25-lp150.2.16.1 mariadb-test-10.2.25-lp150.2.16.1 mariadb-test-debuginfo-10.2.25-lp150.2.16.1 mariadb-tools-10.2.25-lp150.2.16.1 mariadb-tools-debuginfo-10.2.25-lp150.2.16.1 - openSUSE Leap 15.0 (noarch): mariadb-errormessages-10.2.25-lp150.2.16.1 References: https://bugzilla.suse.com/1143215

1 0

openSUSE-RU-2019:1987-1: moderate: Recommended update for rmt-server
by maintenance＠opensuse.org 23 Aug '19

23 Aug '19

openSUSE Recommended Update: Recommended update for rmt-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1987-1 Rating: moderate References: #1132690 #1136020 #1136081 #1138316 #1140492 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for rmt-server fixes the following issues: - Fix mirroring logic when errors are encountered (bsc#1140492) - Refactor RMT::Mirror to download metadata/licenses in parallel - Check repo metadata GPG signatures during mirroring (bsc#1132690) - Add rmt-server-config subpackage with nginx configs (fate#327816, bsc#1136081) - Fix dependency to removed boot_cli_i18n file (bsc#1136020) - Add `rmt-cli systems list` command to list registered systems - Fix create UUID when system_uuid file empty (bsc#1138316) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1987=1 Package List: - openSUSE Leap 15.0 (x86_64): rmt-server-2.3.1-lp150.2.19.2 rmt-server-config-2.3.1-lp150.2.19.2 rmt-server-debuginfo-2.3.1-lp150.2.19.2 rmt-server-debugsource-2.3.1-lp150.2.19.2 rmt-server-pubcloud-2.3.1-lp150.2.19.2 References: https://bugzilla.suse.com/1132690 https://bugzilla.suse.com/1136020 https://bugzilla.suse.com/1136081 https://bugzilla.suse.com/1138316 https://bugzilla.suse.com/1140492

1 0

openSUSE-RU-2019:1992-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 23 Aug '19

23 Aug '19

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1992-1 Rating: moderate References: #1118495 #1119898 #1125507 #1134648 #1139369 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for multipath-tools contains the following changes: - Added basic NVMe ANA support (bsc#1119898, bsc#1118495) - mpathpersist: optimize for setups with many LUNs (bsc#1134648) - mpathpersist: add option -f/--batch-file (bsc#1134648) - libmultipath: get_prio(): really don't reset prio for inaccessible paths (bsc#1118495) - Upstream bug fixes from dm-devel (bsc#1139369): * multipath: call store_pathinfo with DI_BLACKLIST - hwtable: add Lenovo DE series (bsc#1125507) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1992=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): kpartx-0.7.3+147+suse.1382aee-lp150.10.1 kpartx-debuginfo-0.7.3+147+suse.1382aee-lp150.10.1 libdmmp-devel-0.7.3+147+suse.1382aee-lp150.10.1 libdmmp0_1_0-0.7.3+147+suse.1382aee-lp150.10.1 libdmmp0_1_0-debuginfo-0.7.3+147+suse.1382aee-lp150.10.1 multipath-tools-0.7.3+147+suse.1382aee-lp150.10.1 multipath-tools-debuginfo-0.7.3+147+suse.1382aee-lp150.10.1 multipath-tools-debugsource-0.7.3+147+suse.1382aee-lp150.10.1 multipath-tools-devel-0.7.3+147+suse.1382aee-lp150.10.1 - openSUSE Leap 15.0 (x86_64): multipath-tools-rbd-0.7.3+147+suse.1382aee-lp150.10.1 multipath-tools-rbd-debuginfo-0.7.3+147+suse.1382aee-lp150.10.1 References: https://bugzilla.suse.com/1118495 https://bugzilla.suse.com/1119898 https://bugzilla.suse.com/1125507 https://bugzilla.suse.com/1134648 https://bugzilla.suse.com/1139369

1 0

openSUSE-SU-2019:1988-1: moderate: Security update for python
by opensuse-security＠opensuse.org 23 Aug '19

23 Aug '19

openSUSE Security Update: Security update for python ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1988-1 Rating: moderate References: #1141853 Cross-References: CVE-2018-20852 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for python fixes the following issues: - CVE-2018-20852: Fixed an information leak where cookies could be send to the wrong server because of incorrect domain validation (bsc#1141853). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1988=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-2.7.14-lp150.6.17.1 python-curses-2.7.14-lp150.6.17.1 python-curses-debuginfo-2.7.14-lp150.6.17.1 python-debuginfo-2.7.14-lp150.6.17.1 python-debugsource-2.7.14-lp150.6.17.1 python-demo-2.7.14-lp150.6.17.1 python-gdbm-2.7.14-lp150.6.17.1 python-gdbm-debuginfo-2.7.14-lp150.6.17.1 python-idle-2.7.14-lp150.6.17.1 python-tk-2.7.14-lp150.6.17.1 python-tk-debuginfo-2.7.14-lp150.6.17.1 - openSUSE Leap 15.0 (x86_64): python-32bit-2.7.14-lp150.6.17.1 python-32bit-debuginfo-2.7.14-lp150.6.17.1 References: https://www.suse.com/security/cve/CVE-2018-20852.html https://bugzilla.suse.com/1141853

1 0

openSUSE-SU-2019:1985-1: moderate: Recommended update for putty
by opensuse-security＠opensuse.org 21 Aug '19

21 Aug '19

openSUSE Security Update: Recommended update for putty ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1985-1 Rating: moderate References: #1144547 #1144548 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for putty fixes the following issues: Update to new upstream release 0.72 [boo#1144547, boo#1144548] * Fixed two separate vulnerabilities affecting the obsolete SSH-1 protocol, both available before host key checking. * Fixed a vulnerability in all the SSH client tools (PuTTY, Plink, PSFTP and PSCP) if a malicious program can impersonate Pageant. * Fixed a crash in GSSAPI / Kerberos key exchange triggered if the server provided an ordinary SSH host key as part of the exchange. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1985=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1985=1 Package List: - openSUSE Leap 15.1 (x86_64): putty-0.72-lp151.3.3.1 putty-debuginfo-0.72-lp151.3.3.1 putty-debugsource-0.72-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): putty-0.72-lp150.15.1 putty-debuginfo-0.72-lp150.15.1 putty-debugsource-0.72-lp150.15.1 References: https://bugzilla.suse.com/1144547 https://bugzilla.suse.com/1144548

1 0

openSUSE-RU-2019:1984-1: moderate: Recommended update for guake
by maintenance＠opensuse.org 21 Aug '19

21 Aug '19

openSUSE Recommended Update: Recommended update for guake ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1984-1 Rating: moderate References: Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for guake fixes the following issues: guake was updated to version 3.6.3: * Add drag-n-drop to terminal (text & uris) * When scrolling with "shift" (1 page) or "shift + ctrl" (4 pages) it will be faster (gh#Guake/guake#271) * Add schema_version check for tabs session restore * Add save/restore terminal split for tabs session - Save/Restore terminal split by pre-order traversal full binary tree in list * Bump tabs session schema_version to 2 (to support terminal split) * Lazy restore terminal split until Guake is visible * Manage terminal signal handler by handler_ids * Avoid spurious resize event when showing fullscreened window * Make sure workspace-specific-tab-sets only enable on X11 backend (due to wnck) * Add install/uninstall-dev-locale to support dev locale * Fix DualTerminalBox grab focus when remove dead child * Support customize prefix for make * Fix re-focus on terminal after rename dialog destroy * Fix split terminal by menu will not follow last terminal cwd (if option set) * Fix delete_shell using os.waitpid (should not use it) guake was updated to 3.6.1: * new feature: search in current terminal * new feature: session saving * new feature: settings export and import * various fixes to the core * minor build system fixes * translation updates guake was updated to version 3.5.0: * new hotkey (CTRL+SHIFT+H) to open new tab in home directory * "New tab" button (gh#Guake/guake#1471) * Open new tab by double-clicking on the tab bar * Add new context menu on the notebook * Add a CLI option to change palette scheme (gh#Guake/guake#1345) * Bold text is also bright (>= VTE 0.52 only) * guake --split-vertical and --split-horizontal split the current * tab just like the context menu does * Optional close buttons for tabs (disabled by default) * Guake can now provide a set of tabs per workspace * Reverse transparency slider to be more meaningful (gh#Guake/guake#1501) * Fix command-line select tab behavior (gh#Guake/guake#1492) * removed duplicate event bind? previously I had issue where quick-open event would be fired twice because of this. * fix settings only applied to the active workspace if more the 1 is used * fix prompt quit dialog numbers when more then 1 workspace is used * Updated translations. This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-1984=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): guake-3.6.3-bp151.3.3.3 References:

1 0

openSUSE-SU-2019:1983-1: moderate: Security update for ImageMagick
by opensuse-security＠opensuse.org 21 Aug '19

21 Aug '19

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1983-1 Rating: moderate References: #1139884 #1139885 #1139886 #1140100 #1140102 #1140103 #1140104 #1140105 #1140106 #1140110 #1140111 #1140501 #1140513 #1140520 #1140534 #1140538 #1140543 #1140545 #1140547 #1140549 #1140552 #1140554 #1140664 #1140665 #1140666 #1140667 #1140668 #1140669 #1140673 #1141171 Cross-References: CVE-2019-12974 CVE-2019-12975 CVE-2019-12976 CVE-2019-12977 CVE-2019-12978 CVE-2019-12979 CVE-2019-13133 CVE-2019-13134 CVE-2019-13135 CVE-2019-13136 CVE-2019-13137 CVE-2019-13295 CVE-2019-13296 CVE-2019-13297 CVE-2019-13298 CVE-2019-13299 CVE-2019-13300 CVE-2019-13301 CVE-2019-13302 CVE-2019-13303 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 CVE-2019-13307 CVE-2019-13308 CVE-2019-13309 CVE-2019-13310 CVE-2019-13311 CVE-2019-13391 CVE-2019-13454 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes 30 vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: - CVE-2019-13301: Fixed a memory leak in AcquireMagickMemory() (bsc#1140554). - CVE-2019-13309: Fixed a memory leak at AcquireMagickMemory due to mishandling the NoSuchImage error in CLIListOperatorImages (bsc#1140520). - CVE-2019-13310: Fixed a memory leak at AcquireMagickMemory because of an error in MagickWand/mogrify.c (bsc#1140501). - CVE-2019-13311: Fixed a memory leak at AcquireMagickMemory because of a wand/mogrify.c error (bsc#1140513). - CVE-2019-13303: Fixed a heap-based buffer over-read in MagickCore/composite.c in CompositeImage (bsc#1140549). - CVE-2019-13296: Fixed a memory leak in AcquireMagickMemory because of an error in CLIListOperatorImages in MagickWand/operation.c (bsc#1140665). - CVE-2019-13299: Fixed a heap-based buffer over-read at MagickCore/pixel-accessor.h in GetPixelChannel (bsc#1140668). - CVE-2019-13454: Fixed a division by zero in RemoveDuplicateLayers in MagickCore/layer.c (bsc#1141171). - CVE-2019-13295: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140664). - CVE-2019-13297: Fixed a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage (bsc#1140666). - CVE-2019-12979: Fixed the use of uninitialized values in SyncImageSettings() (bsc#1139886). - CVE-2019-13391: Fixed a heap-based buffer over-read in MagickCore/fourier.c (bsc#1140673). - CVE-2019-13308: Fixed a heap-based buffer overflow in MagickCore/fourier.c (bsc#1140534). - CVE-2019-13302: Fixed a heap-based buffer over-read in MagickCore/fourier.c in ComplexImages (bsc#1140552). - CVE-2019-13298: Fixed a heap-based buffer overflow at MagickCore/pixel-accessor.h in SetPixelViaPixelInfo (bsc#1140667). - CVE-2019-13300: Fixed a heap-based buffer overflow at MagickCore/statistic.c in EvaluateImages (bsc#1140669). - CVE-2019-13307: Fixed a heap-based buffer overflow at MagickCore/statistic.c (bsc#1140538). - CVE-2019-12977: Fixed the use of uninitialized values in WriteJP2Imag() (bsc#1139884). - CVE-2019-12975: Fixed a memory leak in the WriteDPXImage() in coders/dpx.c (bsc#1140106). - CVE-2019-13135: Fixed the use of uninitialized values in ReadCUTImage() (bsc#1140103). - CVE-2019-12978: Fixed the use of uninitialized values in ReadPANGOImage() (bsc#1139885). - CVE-2019-12974: Fixed a NULL pointer dereference in the ReadPANGOImage() (bsc#1140111). - CVE-2019-13304: Fixed a stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140547). - CVE-2019-13305: Fixed one more stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140545). - CVE-2019-13306: Fixed an additional stack-based buffer overflow at coders/pnm.c in WritePNMImage (bsc#1140543). - CVE-2019-13133: Fixed a memory leak in the ReadBMPImage() (bsc#1140100). - CVE-2019-13134: Fixed a memory leak in the ReadVIFFImage() (bsc#1140102). - CVE-2019-13137: Fixed a memory leak in the ReadPSImage() (bsc#1140105). - CVE-2019-13136: Fixed a integer overflow vulnerability in the TIFFSeekCustomStream() (bsc#1140104). - CVE-2019-12976: Fixed a memory leak in the ReadPCLImage() in coders/pcl.c(bsc#1140110). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1983=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1983=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): ImageMagick-7.0.7.34-lp151.7.9.1 ImageMagick-config-7-SUSE-7.0.7.34-lp151.7.9.1 ImageMagick-config-7-upstream-7.0.7.34-lp151.7.9.1 ImageMagick-debuginfo-7.0.7.34-lp151.7.9.1 ImageMagick-debugsource-7.0.7.34-lp151.7.9.1 ImageMagick-devel-7.0.7.34-lp151.7.9.1 ImageMagick-extra-7.0.7.34-lp151.7.9.1 ImageMagick-extra-debuginfo-7.0.7.34-lp151.7.9.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp151.7.9.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp151.7.9.1 libMagick++-devel-7.0.7.34-lp151.7.9.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp151.7.9.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.9.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp151.7.9.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp151.7.9.1 perl-PerlMagick-7.0.7.34-lp151.7.9.1 perl-PerlMagick-debuginfo-7.0.7.34-lp151.7.9.1 - openSUSE Leap 15.1 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp151.7.9.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp151.7.9.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp151.7.9.1 libMagick++-devel-32bit-7.0.7.34-lp151.7.9.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.9.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.9.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp151.7.9.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp151.7.9.1 - openSUSE Leap 15.1 (noarch): ImageMagick-doc-7.0.7.34-lp151.7.9.1 - openSUSE Leap 15.0 (i586 x86_64): ImageMagick-7.0.7.34-lp150.2.38.1 ImageMagick-config-7-SUSE-7.0.7.34-lp150.2.38.1 ImageMagick-config-7-upstream-7.0.7.34-lp150.2.38.1 ImageMagick-debuginfo-7.0.7.34-lp150.2.38.1 ImageMagick-debugsource-7.0.7.34-lp150.2.38.1 ImageMagick-devel-7.0.7.34-lp150.2.38.1 ImageMagick-extra-7.0.7.34-lp150.2.38.1 ImageMagick-extra-debuginfo-7.0.7.34-lp150.2.38.1 libMagick++-7_Q16HDRI4-7.0.7.34-lp150.2.38.1 libMagick++-7_Q16HDRI4-debuginfo-7.0.7.34-lp150.2.38.1 libMagick++-devel-7.0.7.34-lp150.2.38.1 libMagickCore-7_Q16HDRI6-7.0.7.34-lp150.2.38.1 libMagickCore-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.38.1 libMagickWand-7_Q16HDRI6-7.0.7.34-lp150.2.38.1 libMagickWand-7_Q16HDRI6-debuginfo-7.0.7.34-lp150.2.38.1 perl-PerlMagick-7.0.7.34-lp150.2.38.1 perl-PerlMagick-debuginfo-7.0.7.34-lp150.2.38.1 - openSUSE Leap 15.0 (x86_64): ImageMagick-devel-32bit-7.0.7.34-lp150.2.38.1 libMagick++-7_Q16HDRI4-32bit-7.0.7.34-lp150.2.38.1 libMagick++-7_Q16HDRI4-32bit-debuginfo-7.0.7.34-lp150.2.38.1 libMagick++-devel-32bit-7.0.7.34-lp150.2.38.1 libMagickCore-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.38.1 libMagickCore-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.38.1 libMagickWand-7_Q16HDRI6-32bit-7.0.7.34-lp150.2.38.1 libMagickWand-7_Q16HDRI6-32bit-debuginfo-7.0.7.34-lp150.2.38.1 - openSUSE Leap 15.0 (noarch): ImageMagick-doc-7.0.7.34-lp150.2.38.1 References: https://www.suse.com/security/cve/CVE-2019-12974.html https://www.suse.com/security/cve/CVE-2019-12975.html https://www.suse.com/security/cve/CVE-2019-12976.html https://www.suse.com/security/cve/CVE-2019-12977.html https://www.suse.com/security/cve/CVE-2019-12978.html https://www.suse.com/security/cve/CVE-2019-12979.html https://www.suse.com/security/cve/CVE-2019-13133.html https://www.suse.com/security/cve/CVE-2019-13134.html https://www.suse.com/security/cve/CVE-2019-13135.html https://www.suse.com/security/cve/CVE-2019-13136.html https://www.suse.com/security/cve/CVE-2019-13137.html https://www.suse.com/security/cve/CVE-2019-13295.html https://www.suse.com/security/cve/CVE-2019-13296.html https://www.suse.com/security/cve/CVE-2019-13297.html https://www.suse.com/security/cve/CVE-2019-13298.html https://www.suse.com/security/cve/CVE-2019-13299.html https://www.suse.com/security/cve/CVE-2019-13300.html https://www.suse.com/security/cve/CVE-2019-13301.html https://www.suse.com/security/cve/CVE-2019-13302.html https://www.suse.com/security/cve/CVE-2019-13303.html https://www.suse.com/security/cve/CVE-2019-13304.html https://www.suse.com/security/cve/CVE-2019-13305.html https://www.suse.com/security/cve/CVE-2019-13306.html https://www.suse.com/security/cve/CVE-2019-13307.html https://www.suse.com/security/cve/CVE-2019-13308.html https://www.suse.com/security/cve/CVE-2019-13309.html https://www.suse.com/security/cve/CVE-2019-13310.html https://www.suse.com/security/cve/CVE-2019-13311.html https://www.suse.com/security/cve/CVE-2019-13391.html https://www.suse.com/security/cve/CVE-2019-13454.html https://bugzilla.suse.com/1139884 https://bugzilla.suse.com/1139885 https://bugzilla.suse.com/1139886 https://bugzilla.suse.com/1140100 https://bugzilla.suse.com/1140102 https://bugzilla.suse.com/1140103 https://bugzilla.suse.com/1140104 https://bugzilla.suse.com/1140105 https://bugzilla.suse.com/1140106 https://bugzilla.suse.com/1140110 https://bugzilla.suse.com/1140111 https://bugzilla.suse.com/1140501 https://bugzilla.suse.com/1140513 https://bugzilla.suse.com/1140520 https://bugzilla.suse.com/1140534 https://bugzilla.suse.com/1140538 https://bugzilla.suse.com/1140543 https://bugzilla.suse.com/1140545 https://bugzilla.suse.com/1140547 https://bugzilla.suse.com/1140549 https://bugzilla.suse.com/1140552 https://bugzilla.suse.com/1140554 https://bugzilla.suse.com/1140664 https://bugzilla.suse.com/1140665 https://bugzilla.suse.com/1140666 https://bugzilla.suse.com/1140667 https://bugzilla.suse.com/1140668 https://bugzilla.suse.com/1140669 https://bugzilla.suse.com/1140673 https://bugzilla.suse.com/1141171

1 0

openSUSE-RU-2019:1982-1: moderate: Recommended update for gcc7
by maintenance＠opensuse.org 21 Aug '19

21 Aug '19

openSUSE Recommended Update: Recommended update for gcc7 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1982-1 Rating: moderate References: #1084842 #1114592 #1124644 #1128794 #1129389 #1131264 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for gcc7 fixes the following issues: Update to gcc-7-branch head (r270528). - Disables switch jump-tables when retpolines are used. This restores some lost performance for kernel builds with retpolines. (bsc#1131264, jsc#SLE-6738) - Fix ICE compiling tensorflow on aarch64. (bsc#1129389) - Fix for aarch64 FMA steering pass use-after-free. (bsc#1128794) - Fix for s390x FP load-and-test issue. (bsc#1124644) - Improve build reproducability by disabling address-space randomization during build. - Adjust gnat manual entries in the info directory. (bsc#1114592) - Includes fix to no longer try linking -lieee with -mieee-fp. (bsc#1084842) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1982=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): cpp7-7.4.1+r270528-lp151.2.3.1 cpp7-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-7.4.1+r270528-lp151.2.3.1 gcc7-ada-7.4.1+r270528-lp151.2.3.1 gcc7-ada-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-c++-7.4.1+r270528-lp151.2.3.1 gcc7-c++-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-debugsource-7.4.1+r270528-lp151.2.3.1 gcc7-fortran-7.4.1+r270528-lp151.2.3.1 gcc7-fortran-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-go-7.4.1+r270528-lp151.2.3.1 gcc7-go-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-locale-7.4.1+r270528-lp151.2.3.1 gcc7-obj-c++-7.4.1+r270528-lp151.2.3.1 gcc7-obj-c++-debuginfo-7.4.1+r270528-lp151.2.3.1 gcc7-objc-7.4.1+r270528-lp151.2.3.1 gcc7-objc-debuginfo-7.4.1+r270528-lp151.2.3.1 libada7-7.4.1+r270528-lp151.2.3.1 libada7-debuginfo-7.4.1+r270528-lp151.2.3.1 libasan4-7.4.1+r270528-lp151.2.3.1 libasan4-debuginfo-7.4.1+r270528-lp151.2.3.1 libcilkrts5-7.4.1+r270528-lp151.2.3.1 libcilkrts5-debuginfo-7.4.1+r270528-lp151.2.3.1 libgfortran4-7.4.1+r270528-lp151.2.3.1 libgfortran4-debuginfo-7.4.1+r270528-lp151.2.3.1 libgo11-7.4.1+r270528-lp151.2.3.1 libgo11-debuginfo-7.4.1+r270528-lp151.2.3.1 libobjc4-7.4.1+r270528-lp151.2.3.1 libobjc4-debuginfo-7.4.1+r270528-lp151.2.3.1 libstdc++6-devel-gcc7-7.4.1+r270528-lp151.2.3.1 libubsan0-7.4.1+r270528-lp151.2.3.1 libubsan0-debuginfo-7.4.1+r270528-lp151.2.3.1 - openSUSE Leap 15.1 (x86_64): gcc7-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-ada-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-c++-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-fortran-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-go-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-obj-c++-32bit-7.4.1+r270528-lp151.2.3.1 gcc7-objc-32bit-7.4.1+r270528-lp151.2.3.1 libada7-32bit-7.4.1+r270528-lp151.2.3.1 libada7-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libasan4-32bit-7.4.1+r270528-lp151.2.3.1 libasan4-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libcilkrts5-32bit-7.4.1+r270528-lp151.2.3.1 libcilkrts5-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libgfortran4-32bit-7.4.1+r270528-lp151.2.3.1 libgfortran4-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libgo11-32bit-7.4.1+r270528-lp151.2.3.1 libgo11-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libobjc4-32bit-7.4.1+r270528-lp151.2.3.1 libobjc4-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 libstdc++6-devel-gcc7-32bit-7.4.1+r270528-lp151.2.3.1 libubsan0-32bit-7.4.1+r270528-lp151.2.3.1 libubsan0-32bit-debuginfo-7.4.1+r270528-lp151.2.3.1 - openSUSE Leap 15.1 (noarch): gcc7-info-7.4.1+r270528-lp151.2.3.1 References: https://bugzilla.suse.com/1084842 https://bugzilla.suse.com/1114592 https://bugzilla.suse.com/1124644 https://bugzilla.suse.com/1128794 https://bugzilla.suse.com/1129389 https://bugzilla.suse.com/1131264

1 0

openSUSE-RU-2019:1981-1: Recommended update for yum
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for yum ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1981-1 Rating: low References: #1111112 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yum fixes the following issues: - No relevent changes for SLE (bsc#1111112) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1981=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python2-yum-3.4.3-lp150.4.4.1 yum-3.4.3-lp150.4.4.1 yum-updatesd-3.4.3-lp150.4.4.1 - openSUSE Leap 15.0 (noarch): yum-lang-3.4.3-lp150.4.4.1 References: https://bugzilla.suse.com/1111112

1 0

openSUSE-RU-2019:1960-1: important: Recommended update for dracut
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1960-1 Rating: important References: #1098915 #1121238 #1125393 #1130107 #1130114 #1132448 #1133819 #1134347 #1134472 #1137784 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - 95dasd-rules 95zfcp-rules: was not correctly looking for rule names (bsc#1137784) - Early microcode was not added from files with .early postfix (bsc#1098915, bsc#1125393) - GPIO modules weren't get included on ARM (bsc#1133819) - Routes were not properly added due to a spelling error (bsc#1134347) - Decouple iscsi from sysinit.target (bsc#1134472) - dracut-lib.sh:dev_unit_name() guard against $dev beginning with "-" (bsc#1132448) - 95iscsi: error messages were created when building initrd, due to multipath timeouts (bsc#1130114, bsc#1130107, bsc#1121238) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1960=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1960=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): dracut-044.2-lp151.2.3.1 dracut-debuginfo-044.2-lp151.2.3.1 dracut-debugsource-044.2-lp151.2.3.1 dracut-fips-044.2-lp151.2.3.1 dracut-ima-044.2-lp151.2.3.1 dracut-tools-044.2-lp151.2.3.1 - openSUSE Leap 15.0 (i586 x86_64): dracut-044.2-lp150.14.30.1 dracut-debuginfo-044.2-lp150.14.30.1 dracut-debugsource-044.2-lp150.14.30.1 dracut-fips-044.2-lp150.14.30.1 dracut-ima-044.2-lp150.14.30.1 dracut-tools-044.2-lp150.14.30.1 References: https://bugzilla.suse.com/1098915 https://bugzilla.suse.com/1121238 https://bugzilla.suse.com/1125393 https://bugzilla.suse.com/1130107 https://bugzilla.suse.com/1130114 https://bugzilla.suse.com/1132448 https://bugzilla.suse.com/1133819 https://bugzilla.suse.com/1134347 https://bugzilla.suse.com/1134472 https://bugzilla.suse.com/1137784

1 0