September 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2019:2096-1: moderate: Security update for libmirage
by opensuse-security＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Security Update: Security update for libmirage ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2096-1 Rating: moderate References: #1148728 Cross-References: CVE-2019-15757 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmirage fixes the following issues: Security issues fixed: - CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2096=1 Package List: - openSUSE Leap 15.1 (x86_64): libmirage-3_2-3.2.2-lp151.3.6.1 libmirage-3_2-debuginfo-3.2.2-lp151.3.6.1 libmirage-debuginfo-3.2.2-lp151.3.6.1 libmirage-debugsource-3.2.2-lp151.3.6.1 libmirage-devel-3.2.2-lp151.3.6.1 libmirage11-3.2.2-lp151.3.6.1 libmirage11-debuginfo-3.2.2-lp151.3.6.1 typelib-1_0-libmirage-3_2-3.2.2-lp151.3.6.1 - openSUSE Leap 15.1 (noarch): libmirage-data-3.2.2-lp151.3.6.1 libmirage-lang-3.2.2-lp151.3.6.1 References: https://www.suse.com/security/cve/CVE-2019-15757.html https://bugzilla.suse.com/1148728

1 0

openSUSE-SU-2019:2095-1: moderate: Security update for libmirage
by opensuse-security＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Security Update: Security update for libmirage ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2095-1 Rating: moderate References: #1148728 Cross-References: CVE-2019-15757 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libmirage fixes the following issues: Security issues fixed: - CVE-2019-15757: Fixed NULL pointer dereference in the NRG parser (boo#1148728). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2095=1 Package List: - openSUSE Leap 15.0 (x86_64): libmirage-3_2-3.2.2-lp150.2.6.1 libmirage-3_2-debuginfo-3.2.2-lp150.2.6.1 libmirage-debuginfo-3.2.2-lp150.2.6.1 libmirage-debugsource-3.2.2-lp150.2.6.1 libmirage-devel-3.2.2-lp150.2.6.1 libmirage11-3.2.2-lp150.2.6.1 libmirage11-debuginfo-3.2.2-lp150.2.6.1 typelib-1_0-libmirage-3_2-3.2.2-lp150.2.6.1 - openSUSE Leap 15.0 (noarch): libmirage-data-3.2.2-lp150.2.6.1 libmirage-lang-3.2.2-lp150.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-15757.html https://bugzilla.suse.com/1148728

1 0

openSUSE-SU-2019:2093-1: important: Security update for exim
by opensuse-security＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Security Update: Security update for exim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2093-1 Rating: important References: #1149182 Cross-References: CVE-2019-15846 Affected Products: openSUSE Leap 15.1 openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: exim was updated to fix a security issue: - CVE-2019-15846: Fixed a buffer overflow in SMTP Delivery process where a remote attacker could execute code with root privileges by sending crafted SNI data (boo#1149182). Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2093=1 - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2093=1 Package List: - openSUSE Leap 15.1 (x86_64): exim-4.88-lp151.4.9.1 exim-debuginfo-4.88-lp151.4.9.1 exim-debugsource-4.88-lp151.4.9.1 eximon-4.88-lp151.4.9.1 eximon-debuginfo-4.88-lp151.4.9.1 eximstats-html-4.88-lp151.4.9.1 - openSUSE Leap 15.0 (x86_64): exim-4.88-lp150.3.9.1 exim-debuginfo-4.88-lp150.3.9.1 exim-debugsource-4.88-lp150.3.9.1 eximon-4.88-lp150.3.9.1 eximon-debuginfo-4.88-lp150.3.9.1 eximstats-html-4.88-lp150.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-15846.html https://bugzilla.suse.com/1149182

1 0

openSUSE-SU-2019:2094-1: moderate: Security update for chromium
by opensuse-security＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2094-1 Rating: moderate References: #1146219 #1149143 Cross-References: CVE-2019-5869 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for chromium fixes the following issues: Security issues fixed: - CVE-2019-5869: Fixed use-after-free in Blink (boo#1149143). - Various fixes from internal audits, fuzzing and other initiatives. Non-security issues fixed: - Fixed no video playback on Intel Kaby Lake and later (boo#1146219). This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2094=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 x86_64): chromedriver-76.0.3809.132-bp151.3.9.1 chromium-76.0.3809.132-bp151.3.9.1 References: https://www.suse.com/security/cve/CVE-2019-5869.html https://bugzilla.suse.com/1146219 https://bugzilla.suse.com/1149143

1 0

openSUSE-RU-2019:2092-1: moderate: Recommended update for jack
by maintenance＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Recommended Update: Recommended update for jack ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2092-1 Rating: moderate References: #1108981 #1132458 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for jack fixes the following issues: - Make jack_control python2-3 compatible (boo#1132458). - Remove unnecessary requires for libjack0 and remove obsolete comments. - Fix return value check of mmap() (boo#1108981). - Update the waf code to the 2.0 series in order to work under python3.7 taken from upstream git. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2092=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): jack-1.9.12-lp151.3.3.1 jack-debuginfo-1.9.12-lp151.3.3.1 jack-debugsource-1.9.12-lp151.3.3.1 libjack-devel-1.9.12-lp151.3.3.1 libjack0-1.9.12-lp151.3.3.1 libjack0-debuginfo-1.9.12-lp151.3.3.1 libjacknet0-1.9.12-lp151.3.3.1 libjacknet0-debuginfo-1.9.12-lp151.3.3.1 libjackserver0-1.9.12-lp151.3.3.1 libjackserver0-debuginfo-1.9.12-lp151.3.3.1 - openSUSE Leap 15.1 (x86_64): jack-32bit-1.9.12-lp151.3.3.1 jack-32bit-debuginfo-1.9.12-lp151.3.3.1 libjack-devel-32bit-1.9.12-lp151.3.3.1 libjack0-32bit-1.9.12-lp151.3.3.1 libjack0-32bit-debuginfo-1.9.12-lp151.3.3.1 libjacknet0-32bit-1.9.12-lp151.3.3.1 libjacknet0-32bit-debuginfo-1.9.12-lp151.3.3.1 libjackserver0-32bit-1.9.12-lp151.3.3.1 libjackserver0-32bit-debuginfo-1.9.12-lp151.3.3.1 References: https://bugzilla.suse.com/1108981 https://bugzilla.suse.com/1132458

1 0

openSUSE-RU-2019:2091-1: moderate: Recommended update for python-cheroot
by maintenance＠opensuse.org 08 Sep '19

08 Sep '19

openSUSE Recommended Update: Recommended update for python-cheroot ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2091-1 Rating: moderate References: #1149124 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cheroot fixes the following issues: - Drop dependency on backports.functools_lru_cache for the python3 subpackage. (boo#1149124) Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2091=1 Package List: - openSUSE Leap 15.1 (noarch): python2-cheroot-6.5.5-lp151.3.6.1 python3-cheroot-6.5.5-lp151.3.6.1 References: https://bugzilla.suse.com/1149124

1 0

openSUSE-SU-2019:2089-1: moderate: Security update for httpie
by opensuse-security＠opensuse.org 07 Sep '19

07 Sep '19

openSUSE Security Update: Security update for httpie ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2089-1 Rating: moderate References: #1148466 Cross-References: CVE-2019-10751 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for httpie fixes the following issues: httpie was updated to version 1.0.3: * Fix CVE-2019-10751 (HTTPie is vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or hers control. (bsc#1148466) This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2089=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python3-httpie-1.0.3-bp151.2.6.1 References: https://www.suse.com/security/cve/CVE-2019-10751.html https://bugzilla.suse.com/1148466

1 0

openSUSE-RU-2019:2086-1: moderate: Recommended update for desktop-file-utils
by maintenance＠opensuse.org 07 Sep '19

07 Sep '19

openSUSE Recommended Update: Recommended update for desktop-file-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2086-1 Rating: moderate References: #1094774 #1148080 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for desktop-file-utils fixes the following issues: - let update-desktop-database recognize font media types (boo#1148080) - add Pantheon to desktop env list(fdo#105785 boo#1094774). - Move RPM macros to %_rpmmacrodir. - suse-update-mime-defaults requires coreutils and awk add both to package requires Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2086=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): desktop-file-utils-0.23-lp151.4.3.1 desktop-file-utils-debuginfo-0.23-lp151.4.3.1 desktop-file-utils-debugsource-0.23-lp151.4.3.1 References: https://bugzilla.suse.com/1094774 https://bugzilla.suse.com/1148080

1 0

openSUSE-RU-2019:2088-1: moderate: Recommended update for youtube-dl
by maintenance＠opensuse.org 07 Sep '19

07 Sep '19

openSUSE Recommended Update: Recommended update for youtube-dl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2088-1 Rating: moderate References: #1120842 #1121694 Affected Products: openSUSE Backports SLE-15-SP1 openSUSE Backports SLE-15 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for youtube-dl fixes the following issues: youtube-dl was updated to new upstream release 2019.08.13: * downloader/fragment: Fix ETA calculation of resumed download * discovery: extract series meta field * roosterteeth: add support for watch URLs Update to new upstream release 2019.08.02 * [yahoo:japannews] Add support for yahoo.co.jp (#21698, #21265) * [discovery] Add support go.discovery.com URLs * [youtube:playlist] Relax video regular expression (#21844) * [generic] Restrict --default-search schemeless URLs detection pattern (#21842) * [vrv] Fix CMS signing query extraction (#21809) * [youtube] Fix and improve title and description extraction (#21934) * [tvigle] Add support for HLS and DASH formats (#21967) * [tvigle] Fix extraction (#21967) * [yandexvideo] Add support for DASH formats (#21971) * [discovery] Use API call for video data extraction (#21808) * [mgtv] Extract format_note (#21881) * [tvn24] Fix metadata extraction (#21833, #21834) * [dlive] Relax URL regular expression (#21909) * [openload] Add support for oload.best (#21913) * [youtube] Improve metadata extraction for age gate content (#21943) Update to new upstream release 2019.07.16: * [asiancrush] Add support for yuyutv.com, midnightpulp.com and cocoro.tv * (#21281, #21290) * [kaltura] Check source format URL (#21290) * [ctsnews] Fix YouTube embeds extraction (#21678) * [einthusan] Add support for einthusan.com (#21748, #21775) * [youtube] Add support for invidious.mastodon.host (#21777) * [gfycat] Extend URL regular expression (#21779, #21780) * [youtube] Restrict is_live extraction (#21782) Update to new upstream release 2019.07.02 * Introduce random_user_agent and use as default User-Agent (closes #21546) * dailymotion: add support embed with DM.player js call * openload: Add support for oload.biz This update was imported from the openSUSE:Leap:15.0:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2088=1 - openSUSE Backports SLE-15: zypper in -t patch openSUSE-2019-2088=1 Package List: - openSUSE Backports SLE-15-SP1 (noarch): python2-youtube-dl-2019.08.13-bp151.5.3.1 python3-youtube-dl-2019.08.13-bp151.5.3.1 youtube-dl-2019.08.13-bp151.5.3.1 youtube-dl-bash-completion-2019.08.13-bp151.5.3.1 youtube-dl-fish-completion-2019.08.13-bp151.5.3.1 youtube-dl-zsh-completion-2019.08.13-bp151.5.3.1 - openSUSE Backports SLE-15 (noarch): youtube-dl-2019.08.13-bp150.7.1 youtube-dl-bash-completion-2019.08.13-bp150.7.1 youtube-dl-fish-completion-2019.08.13-bp150.7.1 youtube-dl-zsh-completion-2019.08.13-bp150.7.1 References: https://bugzilla.suse.com/1120842 https://bugzilla.suse.com/1121694

1 0

openSUSE-RU-2019:2090-1: moderate: Recommended update for plasma5-pk-updates
by maintenance＠opensuse.org 07 Sep '19

07 Sep '19

openSUSE Recommended Update: Recommended update for plasma5-pk-updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2090-1 Rating: moderate References: #1086068 #1148168 Affected Products: openSUSE Backports SLE-15-SP1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for plasma5-pk-updates fixes the following issues: Various fixes were done to improve the french translations (boo#1086068) Also implemented EULA handling (boo#1148168): This update was imported from the openSUSE:Leap:15.1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Backports SLE-15-SP1: zypper in -t patch openSUSE-2019-2090=1 Package List: - openSUSE Backports SLE-15-SP1 (aarch64 ppc64le s390x x86_64): plasma5-pk-updates-0.3.2-bp151.5.3.1 - openSUSE Backports SLE-15-SP1 (noarch): plasma5-pk-updates-lang-0.3.2-bp151.5.3.1 References: https://bugzilla.suse.com/1086068 https://bugzilla.suse.com/1148168

1 0