August 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:1973-1: important: Recommended update for open-vm-tools
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1973-1 Rating: important References: #1143452 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-vm-tools fixes the following issues: - Fixes a regression which was introduced by the recent patch of open-vm-tools in the vmtoolsd service file to cause cyclic dependencies (bsc#1143452) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1973=1 Package List: - openSUSE Leap 15.1 (x86_64): libvmtools-devel-10.3.10-lp151.2.6.1 libvmtools0-10.3.10-lp151.2.6.1 libvmtools0-debuginfo-10.3.10-lp151.2.6.1 open-vm-tools-10.3.10-lp151.2.6.1 open-vm-tools-debuginfo-10.3.10-lp151.2.6.1 open-vm-tools-debugsource-10.3.10-lp151.2.6.1 open-vm-tools-desktop-10.3.10-lp151.2.6.1 open-vm-tools-desktop-debuginfo-10.3.10-lp151.2.6.1 References: https://bugzilla.suse.com/1143452

1 0

openSUSE-RU-2019:1970-1: moderate: Recommended update for zlib
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1970-1 Rating: moderate References: #1136717 #1137624 #1141059 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for zlib fixes the following issues: - Update the s390 patchset. (bsc#1137624) - Tweak zlib-power8 to have type of crc32_vpmsum conform to usage. (bsc#1141059) - Use FAT LTO objects in order to provide proper static library. - Do not enable the previous patchset on s390 but just s390x. (bsc#1137624) - Add patchset for s390 improvements. (jsc#SLE-5807, bsc#1136717) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1970=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1970=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libminizip1-1.2.11-lp151.5.3.1 libminizip1-debuginfo-1.2.11-lp151.5.3.1 libz1-1.2.11-lp151.5.3.1 libz1-debuginfo-1.2.11-lp151.5.3.1 minizip-devel-1.2.11-lp151.5.3.1 zlib-debugsource-1.2.11-lp151.5.3.1 zlib-devel-1.2.11-lp151.5.3.1 zlib-devel-static-1.2.11-lp151.5.3.1 - openSUSE Leap 15.1 (x86_64): libminizip1-32bit-1.2.11-lp151.5.3.1 libminizip1-32bit-debuginfo-1.2.11-lp151.5.3.1 libz1-32bit-1.2.11-lp151.5.3.1 libz1-32bit-debuginfo-1.2.11-lp151.5.3.1 zlib-devel-32bit-1.2.11-lp151.5.3.1 zlib-devel-static-32bit-1.2.11-lp151.5.3.1 - openSUSE Leap 15.0 (i586 x86_64): libminizip1-1.2.11-lp150.11.1 libminizip1-debuginfo-1.2.11-lp150.11.1 libz1-1.2.11-lp150.11.1 libz1-debuginfo-1.2.11-lp150.11.1 minizip-devel-1.2.11-lp150.11.1 zlib-debugsource-1.2.11-lp150.11.1 zlib-devel-1.2.11-lp150.11.1 zlib-devel-static-1.2.11-lp150.11.1 - openSUSE Leap 15.0 (x86_64): libminizip1-32bit-1.2.11-lp150.11.1 libminizip1-32bit-debuginfo-1.2.11-lp150.11.1 libz1-32bit-1.2.11-lp150.11.1 libz1-32bit-debuginfo-1.2.11-lp150.11.1 zlib-devel-32bit-1.2.11-lp150.11.1 zlib-devel-static-32bit-1.2.11-lp150.11.1 References: https://bugzilla.suse.com/1136717 https://bugzilla.suse.com/1137624 https://bugzilla.suse.com/1141059

1 0

openSUSE-RU-2019:1961-1: moderate: Recommended update for glm
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for glm ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1961-1 Rating: moderate References: #1135667 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for glm fixes the following issues: - Create a glm.pc file (fixes bsc#1135667) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1961=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1961=1 Package List: - openSUSE Leap 15.1 (noarch): glm-doc-0.9.7.5-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): glm-devel-0.9.7.5-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): glm-devel-0.9.7.5-lp150.2.3.1 - openSUSE Leap 15.0 (noarch): glm-doc-0.9.7.5-lp150.2.3.1 References: https://bugzilla.suse.com/1135667

1 0

openSUSE-RU-2019:1967-1: moderate: Recommended update for aide
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for aide ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1967-1 Rating: moderate References: #1098360 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aide fixes the following issues: - Remove not available gcrypt algorithm 7 DB_HAVAL (bsc#1098360). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1967=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1967=1 Package List: - openSUSE Leap 15.1 (x86_64): aide-0.16-lp151.3.3.1 aide-debuginfo-0.16-lp151.3.3.1 aide-debugsource-0.16-lp151.3.3.1 aide-test-0.16-lp151.3.3.1 - openSUSE Leap 15.0 (x86_64): aide-0.16-lp150.2.3.1 aide-debuginfo-0.16-lp150.2.3.1 aide-debugsource-0.16-lp150.2.3.1 aide-test-0.16-lp150.2.3.1 References: https://bugzilla.suse.com/1098360

1 0

openSUSE-RU-2019:1979-1: moderate: Recommended update for systemtap
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for systemtap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1979-1 Rating: moderate References: #1125231 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for systemtap fixes the following issues: - Use %tmpfiles_create macro in -server package: consider the right usage in transactional update cases. - BuildRequire pkgconfig(systemd) instead of systemd: allow to use systemd-mini during build (bsc#1125231) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1979=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): systemtap-3.2-lp150.5.4.2 systemtap-debuginfo-3.2-lp150.5.4.2 systemtap-debugsource-3.2-lp150.5.4.2 systemtap-headers-3.2-lp150.5.4.2 systemtap-runtime-3.2-lp150.5.4.2 systemtap-runtime-debuginfo-3.2-lp150.5.4.2 systemtap-sdt-devel-3.2-lp150.5.4.2 systemtap-server-3.2-lp150.5.4.2 systemtap-server-debuginfo-3.2-lp150.5.4.2 - openSUSE Leap 15.0 (noarch): systemtap-docs-3.2-lp150.5.4.2 References: https://bugzilla.suse.com/1125231

1 0

openSUSE-RU-2019:1980-1: moderate: Recommended update for rapidjson
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for rapidjson ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1980-1 Rating: moderate References: Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for rapidjson fixes the following issues: The package is included in 15.1. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1980=1 Package List: - openSUSE Leap 15.1 (noarch): rapidjson-devel-1.1.0-lp151.2.1 References:

1 0

openSUSE-SU-2019:1964-1: moderate: Security update for tcpdump
by opensuse-security＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Security Update: Security update for tcpdump ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:1964-1 Rating: moderate References: #1068716 #1142439 Cross-References: CVE-2017-16808 CVE-2019-1010220 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for tcpdump fixes the following issues: Security issues fixed: - CVE-2019-1010220: Fixed a buffer over-read in print_prefix() which may expose data (bsc#1142439). - CVE-2017-16808: Fixed a heap-based buffer over-read related to aoe_print() and lookup_emem() (bsc#1068716). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1964=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1964=1 Package List: - openSUSE Leap 15.1 (x86_64): tcpdump-4.9.2-lp151.4.3.1 tcpdump-debuginfo-4.9.2-lp151.4.3.1 tcpdump-debugsource-4.9.2-lp151.4.3.1 - openSUSE Leap 15.0 (x86_64): tcpdump-4.9.2-lp150.7.1 tcpdump-debuginfo-4.9.2-lp150.7.1 tcpdump-debugsource-4.9.2-lp150.7.1 References: https://www.suse.com/security/cve/CVE-2017-16808.html https://www.suse.com/security/cve/CVE-2019-1010220.html https://bugzilla.suse.com/1068716 https://bugzilla.suse.com/1142439

1 0

openSUSE-RU-2019:1969-1: important: Recommended update for open-vm-tools
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for open-vm-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1969-1 Rating: important References: #1143452 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for open-vm-tools fixes the following issues: - Fixes a regression which was introduced by the recent patch of open-vm-tools in the vmtoolsd service file to cause cyclic dependencies (bsc#1143452) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1969=1 Package List: - openSUSE Leap 15.0 (x86_64): libvmtools-devel-10.3.10-lp150.2.19.1 libvmtools0-10.3.10-lp150.2.19.1 libvmtools0-debuginfo-10.3.10-lp150.2.19.1 open-vm-tools-10.3.10-lp150.2.19.1 open-vm-tools-debuginfo-10.3.10-lp150.2.19.1 open-vm-tools-debugsource-10.3.10-lp150.2.19.1 open-vm-tools-desktop-10.3.10-lp150.2.19.1 open-vm-tools-desktop-debuginfo-10.3.10-lp150.2.19.1 References: https://bugzilla.suse.com/1143452

1 0

openSUSE-RU-2019:1976-1: moderate: Recommended update for mozilla-nspr, mozilla-nss
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for mozilla-nspr, mozilla-nss ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1976-1 Rating: moderate References: #1141322 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mozilla-nspr, mozilla-nss fixes the following issues: mozilla-nss was updated to NSS 3.45 (bsc#1141322) : * New function in pk11pub.h: PK11_FindRawCertsWithSubject * The following CA certificates were Removed: CN = Certinomis - Root CA (bmo#1552374) * Implement Delegated Credentials (draft-ietf-tls-subcerts) (bmo#1540403) This adds a new experimental function SSL_DelegateCredential Note: In 3.45, selfserv does not yet support delegated credentials (See bmo#1548360). Note: In 3.45 the SSLChannelInfo is left unmodified, while an upcoming change in 3.46 will set SSLChannelInfo.authKeyBits to that of the delegated credential for better policy enforcement (See bmo#1563078). * Replace ARM32 Curve25519 implementation with one from fiat-crypto (bmo#1550579) * Expose a function PK11_FindRawCertsWithSubject for finding certificates with a given subject on a given slot (bmo#1552262) * Add IPSEC IKE support to softoken (bmo#1546229) * Add support for the Elbrus lcc compiler (<=1.23) (bmo#1554616) * Expose an external clock for SSL (bmo#1543874) This adds new experimental functions: SSL_SetTimeFunc, SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and SSL_ReleaseAntiReplayContext. The experimental function SSL_InitAntiReplay is removed. * Various changes in response to the ongoing FIPS review (bmo#1546477) Note: The source package size has increased substantially due to the new FIPS test vectors. This will likely prompt follow-on work, but please accept our apologies in the meantime. mozilla-nspr was updated to version 4.21 * Changed prbit.h to use builtin function on aarch64. * Removed Gonk/B2G references. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-1976=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1976=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libfreebl3-3.45-lp151.2.6.1 libfreebl3-debuginfo-3.45-lp151.2.6.1 libfreebl3-hmac-3.45-lp151.2.6.1 libsoftokn3-3.45-lp151.2.6.1 libsoftokn3-debuginfo-3.45-lp151.2.6.1 libsoftokn3-hmac-3.45-lp151.2.6.1 mozilla-nspr-4.21-lp151.2.3.1 mozilla-nspr-debuginfo-4.21-lp151.2.3.1 mozilla-nspr-debugsource-4.21-lp151.2.3.1 mozilla-nspr-devel-4.21-lp151.2.3.1 mozilla-nss-3.45-lp151.2.6.1 mozilla-nss-certs-3.45-lp151.2.6.1 mozilla-nss-certs-debuginfo-3.45-lp151.2.6.1 mozilla-nss-debuginfo-3.45-lp151.2.6.1 mozilla-nss-debugsource-3.45-lp151.2.6.1 mozilla-nss-devel-3.45-lp151.2.6.1 mozilla-nss-sysinit-3.45-lp151.2.6.1 mozilla-nss-sysinit-debuginfo-3.45-lp151.2.6.1 mozilla-nss-tools-3.45-lp151.2.6.1 mozilla-nss-tools-debuginfo-3.45-lp151.2.6.1 - openSUSE Leap 15.1 (x86_64): libfreebl3-32bit-3.45-lp151.2.6.1 libfreebl3-32bit-debuginfo-3.45-lp151.2.6.1 libfreebl3-hmac-32bit-3.45-lp151.2.6.1 libsoftokn3-32bit-3.45-lp151.2.6.1 libsoftokn3-32bit-debuginfo-3.45-lp151.2.6.1 libsoftokn3-hmac-32bit-3.45-lp151.2.6.1 mozilla-nspr-32bit-4.21-lp151.2.3.1 mozilla-nspr-32bit-debuginfo-4.21-lp151.2.3.1 mozilla-nss-32bit-3.45-lp151.2.6.1 mozilla-nss-32bit-debuginfo-3.45-lp151.2.6.1 mozilla-nss-certs-32bit-3.45-lp151.2.6.1 mozilla-nss-certs-32bit-debuginfo-3.45-lp151.2.6.1 mozilla-nss-sysinit-32bit-3.45-lp151.2.6.1 mozilla-nss-sysinit-32bit-debuginfo-3.45-lp151.2.6.1 - openSUSE Leap 15.0 (i586 x86_64): libfreebl3-3.45-lp150.2.27.1 libfreebl3-debuginfo-3.45-lp150.2.27.1 libfreebl3-hmac-3.45-lp150.2.27.1 libsoftokn3-3.45-lp150.2.27.1 libsoftokn3-debuginfo-3.45-lp150.2.27.1 libsoftokn3-hmac-3.45-lp150.2.27.1 mozilla-nspr-4.21-lp150.7.1 mozilla-nspr-debuginfo-4.21-lp150.7.1 mozilla-nspr-debugsource-4.21-lp150.7.1 mozilla-nspr-devel-4.21-lp150.7.1 mozilla-nss-3.45-lp150.2.27.1 mozilla-nss-certs-3.45-lp150.2.27.1 mozilla-nss-certs-debuginfo-3.45-lp150.2.27.1 mozilla-nss-debuginfo-3.45-lp150.2.27.1 mozilla-nss-debugsource-3.45-lp150.2.27.1 mozilla-nss-devel-3.45-lp150.2.27.1 mozilla-nss-sysinit-3.45-lp150.2.27.1 mozilla-nss-sysinit-debuginfo-3.45-lp150.2.27.1 mozilla-nss-tools-3.45-lp150.2.27.1 mozilla-nss-tools-debuginfo-3.45-lp150.2.27.1 - openSUSE Leap 15.0 (x86_64): libfreebl3-32bit-3.45-lp150.2.27.1 libfreebl3-32bit-debuginfo-3.45-lp150.2.27.1 libfreebl3-hmac-32bit-3.45-lp150.2.27.1 libsoftokn3-32bit-3.45-lp150.2.27.1 libsoftokn3-32bit-debuginfo-3.45-lp150.2.27.1 libsoftokn3-hmac-32bit-3.45-lp150.2.27.1 mozilla-nspr-32bit-4.21-lp150.7.1 mozilla-nspr-32bit-debuginfo-4.21-lp150.7.1 mozilla-nss-32bit-3.45-lp150.2.27.1 mozilla-nss-32bit-debuginfo-3.45-lp150.2.27.1 mozilla-nss-certs-32bit-3.45-lp150.2.27.1 mozilla-nss-certs-32bit-debuginfo-3.45-lp150.2.27.1 mozilla-nss-sysinit-32bit-3.45-lp150.2.27.1 mozilla-nss-sysinit-32bit-debuginfo-3.45-lp150.2.27.1 References: https://bugzilla.suse.com/1141322

1 0

openSUSE-RU-2019:1977-1: moderate: Recommended update for osinfo-db
by maintenance＠opensuse.org 20 Aug '19

20 Aug '19

openSUSE Recommended Update: Recommended update for osinfo-db ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:1977-1 Rating: moderate References: #1143684 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for osinfo-db fixes the following issues: - Updated database to version 20190504 - Added official release date for sle15sp1 - Added support for sle12sp5 (bsc#1143684) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-1977=1 Package List: - openSUSE Leap 15.0 (noarch): osinfo-db-20190504-lp150.2.16.1 References: https://bugzilla.suse.com/1143684

1 0