openSUSE Recommended Update: Recommended update for aaa_base
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2194-1
Rating: moderate
References: #1146866
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that has one recommended fix can now be installed.
Description:
This update for aaa_base fixes the following issues:
Added sysctl.d/51-network.conf to tighten network security (bsc#1146866)
(jira#SLE-9132)
Following settings have been tightened (and set to 0):
- net.ipv4.conf.all.accept_redirects
- net.ipv4.conf.default.accept_redirects
- net.ipv4.conf.default.accept_source_route
- net.ipv6.conf.all.accept_redirects
- net.ipv6.conf.default.accept_redirects
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-2194=1
Package List:
- openSUSE Leap 15.0 (i586 x86_64):
aaa_base-84.87+git20180409.04c9dae-lp150.17.1
aaa_base-debuginfo-84.87+git20180409.04c9dae-lp150.17.1
aaa_base-debugsource-84.87+git20180409.04c9dae-lp150.17.1
aaa_base-extras-84.87+git20180409.04c9dae-lp150.17.1
aaa_base-malloccheck-84.87+git20180409.04c9dae-lp150.17.1
aaa_base-wsl-84.87+git20180409.04c9dae-lp150.17.1
References:
https://bugzilla.suse.com/1146866
openSUSE Recommended Update: Recommended update for python-urllib3
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2195-1
Rating: moderate
References: #1150895
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that has one recommended fix can now be installed.
Description:
This update for python-urllib3 fixes the following issues:
- Add missing dependency on python-six (bsc#1150895)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-2195=1
Package List:
- openSUSE Leap 15.0 (noarch):
python2-urllib3-1.22-lp150.5.6.1
python3-urllib3-1.22-lp150.5.6.1
References:
https://bugzilla.suse.com/1150895
openSUSE Recommended Update: Recommended update for aaa_base
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2196-1
Rating: moderate
References: #1146866
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________
An update that has one recommended fix can now be installed.
Description:
This update for aaa_base fixes the following issues:
Added sysctl.d/51-network.conf to tighten network security (bsc#1146866)
(jira#SLE-9132)
Following settings have been tightened (and set to 0):
- net.ipv4.conf.all.accept_redirects
- net.ipv4.conf.default.accept_redirects
- net.ipv4.conf.default.accept_source_route
- net.ipv6.conf.all.accept_redirects
- net.ipv6.conf.default.accept_redirects
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2019-2196=1
Package List:
- openSUSE Leap 15.1 (i586 x86_64):
aaa_base-84.87+git20180409.04c9dae-lp151.5.9.1
aaa_base-debuginfo-84.87+git20180409.04c9dae-lp151.5.9.1
aaa_base-debugsource-84.87+git20180409.04c9dae-lp151.5.9.1
aaa_base-extras-84.87+git20180409.04c9dae-lp151.5.9.1
aaa_base-malloccheck-84.87+git20180409.04c9dae-lp151.5.9.1
aaa_base-wsl-84.87+git20180409.04c9dae-lp151.5.9.1
References:
https://bugzilla.suse.com/1146866
openSUSE Recommended Update: Recommended update for python-urllib3
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2197-1
Rating: moderate
References: #1150895
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________
An update that has one recommended fix can now be installed.
Description:
This update for python-urllib3 fixes the following issues:
- Add missing dependency on python-six (bsc#1150895)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2019-2197=1
Package List:
- openSUSE Leap 15.1 (noarch):
python2-urllib3-1.24-lp151.2.6.1
python2-urllib3-test-1.24-lp151.2.6.1
python3-urllib3-1.24-lp151.2.6.1
python3-urllib3-test-1.24-lp151.2.6.1
References:
https://bugzilla.suse.com/1150895
openSUSE Recommended Update: Recommended update for bash
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2191-1
Rating: moderate
References: #1133773 #1143055
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that has two recommended fixes can now be
installed.
Description:
This update for bash fixes the following issues:
- Rework patch readline-7.0-screen (bsc#1143055): map all
"screen(-xxx)?.yyy(-zzz)?" to "screen" as well as map "konsole(-xxx)?"
and "gnome(-xxx)?" to "xterm"
- Add a backport from bash 5.0 to perform better with large numbers of sub
processes. (bsc#1133773)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-2191=1
Package List:
- openSUSE Leap 15.0 (i586 x86_64):
bash-4.4-lp150.13.1
bash-debuginfo-4.4-lp150.13.1
bash-debugsource-4.4-lp150.13.1
bash-devel-4.4-lp150.13.1
bash-loadables-4.4-lp150.13.1
bash-loadables-debuginfo-4.4-lp150.13.1
libreadline7-7.0-lp150.13.1
libreadline7-debuginfo-7.0-lp150.13.1
readline-devel-7.0-lp150.13.1
readline-devel-static-7.0-lp150.13.1
- openSUSE Leap 15.0 (x86_64):
bash-32bit-debuginfo-4.4-lp150.13.1
libreadline7-32bit-7.0-lp150.13.1
libreadline7-32bit-debuginfo-7.0-lp150.13.1
readline-devel-32bit-7.0-lp150.13.1
- openSUSE Leap 15.0 (noarch):
bash-doc-4.4-lp150.13.1
bash-lang-4.4-lp150.13.1
readline-doc-7.0-lp150.13.1
References:
https://bugzilla.suse.com/1133773https://bugzilla.suse.com/1143055
openSUSE Recommended Update: Recommended update for bash
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2193-1
Rating: moderate
References: #1133773 #1143055
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________
An update that has two recommended fixes can now be
installed.
Description:
This update for bash fixes the following issues:
- Rework patch readline-7.0-screen (bsc#1143055): map all
"screen(-xxx)?.yyy(-zzz)?" to "screen" as well as map "konsole(-xxx)?"
and "gnome(-xxx)?" to "xterm"
- Add a backport from bash 5.0 to perform better with large numbers of sub
processes. (bsc#1133773)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2019-2193=1
Package List:
- openSUSE Leap 15.1 (i586 x86_64):
bash-4.4-lp151.10.3.1
bash-debuginfo-4.4-lp151.10.3.1
bash-debugsource-4.4-lp151.10.3.1
bash-devel-4.4-lp151.10.3.1
bash-loadables-4.4-lp151.10.3.1
bash-loadables-debuginfo-4.4-lp151.10.3.1
libreadline7-7.0-lp151.10.3.1
libreadline7-debuginfo-7.0-lp151.10.3.1
readline-devel-7.0-lp151.10.3.1
readline-devel-static-7.0-lp151.10.3.1
- openSUSE Leap 15.1 (x86_64):
bash-32bit-debuginfo-4.4-lp151.10.3.1
libreadline7-32bit-7.0-lp151.10.3.1
libreadline7-32bit-debuginfo-7.0-lp151.10.3.1
readline-devel-32bit-7.0-lp151.10.3.1
- openSUSE Leap 15.1 (noarch):
bash-doc-4.4-lp151.10.3.1
bash-lang-4.4-lp151.10.3.1
readline-doc-7.0-lp151.10.3.1
References:
https://bugzilla.suse.com/1133773https://bugzilla.suse.com/1143055
openSUSE Recommended Update: Recommended update for yast2-auth-client
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2190-1
Rating: moderate
References: #1136139 #1137380
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________
An update that has two recommended fixes can now be
installed.
Description:
This update for yast2-auth-client provides the following fixes:
- Fix issue importing legacy XML based autoyast configuration.
(bsc#1137380)
- Require network to be configured before importing autoyast
configuration. (bsc#1136139)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2019-2190=1
Package List:
- openSUSE Leap 15.1 (noarch):
yast2-auth-client-4.1.2-lp151.2.3.1
References:
https://bugzilla.suse.com/1136139https://bugzilla.suse.com/1137380
openSUSE Recommended Update: Recommended update for systemtap
______________________________________________________________________________
Announcement ID: openSUSE-RU-2019:2187-1
Rating: moderate
References: #1132538
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that has one recommended fix can now be installed.
Description:
This update for systemtap fixes the following issues:
- Fixes an issue where systemtap-server and systemtap client didn't work
(bsc#1132538)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Recommended Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-2187=1
Package List:
- openSUSE Leap 15.0 (i586 x86_64):
systemtap-3.2-lp150.5.7.13
systemtap-debuginfo-3.2-lp150.5.7.13
systemtap-debugsource-3.2-lp150.5.7.13
systemtap-headers-3.2-lp150.5.7.1
systemtap-runtime-3.2-lp150.5.7.13
systemtap-runtime-debuginfo-3.2-lp150.5.7.13
systemtap-sdt-devel-3.2-lp150.5.7.13
systemtap-server-3.2-lp150.5.7.13
systemtap-server-debuginfo-3.2-lp150.5.7.13
- openSUSE Leap 15.0 (noarch):
systemtap-docs-3.2-lp150.5.7.21
References:
https://bugzilla.suse.com/1132538
openSUSE Security Update: Security update for openssl-1_1
______________________________________________________________________________
Announcement ID: openSUSE-SU-2019:2189-1
Rating: moderate
References: #1150003 #1150250
Cross-References: CVE-2019-1547 CVE-2019-1563
Affected Products:
openSUSE Leap 15.0
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
This update for openssl-1_1 fixes the following issues:
OpenSSL Security Advisory [10 September 2019]
* CVE-2019-1547: Added EC_GROUP_set_generator side channel attack
avoidance. (bsc#1150003)
* CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption
transported key (bsc#1150250)
This update was imported from the SUSE:SLE-15:Update update project.
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.0:
zypper in -t patch openSUSE-2019-2189=1
Package List:
- openSUSE Leap 15.0 (i586 x86_64):
libopenssl-1_1-devel-1.1.0i-lp150.3.25.1
libopenssl1_1-1.1.0i-lp150.3.25.1
libopenssl1_1-debuginfo-1.1.0i-lp150.3.25.1
libopenssl1_1-hmac-1.1.0i-lp150.3.25.1
openssl-1_1-1.1.0i-lp150.3.25.1
openssl-1_1-debuginfo-1.1.0i-lp150.3.25.1
openssl-1_1-debugsource-1.1.0i-lp150.3.25.1
- openSUSE Leap 15.0 (noarch):
openssl-1_1-doc-1.1.0i-lp150.3.25.1
- openSUSE Leap 15.0 (x86_64):
libopenssl-1_1-devel-32bit-1.1.0i-lp150.3.25.1
libopenssl1_1-32bit-1.1.0i-lp150.3.25.1
libopenssl1_1-32bit-debuginfo-1.1.0i-lp150.3.25.1
libopenssl1_1-hmac-32bit-1.1.0i-lp150.3.25.1
References:
https://www.suse.com/security/cve/CVE-2019-1547.htmlhttps://www.suse.com/security/cve/CVE-2019-1563.htmlhttps://bugzilla.suse.com/1150003https://bugzilla.suse.com/1150250