September 2019 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2019:2170-1: moderate: Recommended update for polkit-default-privs
by maintenance＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Recommended Update: Recommended update for polkit-default-privs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2170-1 Rating: moderate References: #1144077 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for polkit-default-privs fixes the following issues: - whitelist the checkpoint action for libvirt (bsc#1144077) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2170=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rpmlint-mini-1.10-lp150.15.1 rpmlint-mini-debuginfo-1.10-lp150.15.1 rpmlint-mini-debugsource-1.10-lp150.15.1 - openSUSE Leap 15.0 (noarch): polkit-default-privs-13.2-lp150.8.28.1 References: https://bugzilla.suse.com/1144077

1 0

openSUSE-RU-2019:2165-1: moderate: Recommended update for lmdb
by maintenance＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Recommended Update: Recommended update for lmdb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2165-1 Rating: moderate References: #1136132 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lmdb fixes the following issues: - Fix occasional crash when freed pages landed on the dirty list twice (bsc#1136132). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2165=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): liblmdb-0_9_17-0.9.17-lp150.3.3.1 liblmdb-0_9_17-debuginfo-0.9.17-lp150.3.3.1 lmdb-0.9.17-lp150.3.3.1 lmdb-debuginfo-0.9.17-lp150.3.3.1 lmdb-debugsource-0.9.17-lp150.3.3.1 lmdb-devel-0.9.17-lp150.3.3.1 - openSUSE Leap 15.0 (x86_64): liblmdb-0_9_17-32bit-0.9.17-lp150.3.3.1 liblmdb-0_9_17-32bit-debuginfo-0.9.17-lp150.3.3.1 References: https://bugzilla.suse.com/1136132

1 0

openSUSE-RU-2019:2162-1: moderate: Recommended update for rsyslog
by maintenance＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Recommended Update: Recommended update for rsyslog ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2162-1 Rating: moderate References: #1146872 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rsyslog brings support for the "mmkubernetes" rsyslog module. (FATE#327800 bsc#1146872) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2162=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): rsyslog-8.33.1-lp150.2.16.1 rsyslog-debuginfo-8.33.1-lp150.2.16.1 rsyslog-debugsource-8.33.1-lp150.2.16.1 rsyslog-diag-tools-8.33.1-lp150.2.16.1 rsyslog-diag-tools-debuginfo-8.33.1-lp150.2.16.1 rsyslog-doc-8.33.1-lp150.2.16.1 rsyslog-module-dbi-8.33.1-lp150.2.16.1 rsyslog-module-dbi-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-elasticsearch-8.33.1-lp150.2.16.1 rsyslog-module-elasticsearch-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-gcrypt-8.33.1-lp150.2.16.1 rsyslog-module-gcrypt-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-gssapi-8.33.1-lp150.2.16.1 rsyslog-module-gssapi-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-gtls-8.33.1-lp150.2.16.1 rsyslog-module-gtls-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-mmnormalize-8.33.1-lp150.2.16.1 rsyslog-module-mmnormalize-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-mysql-8.33.1-lp150.2.16.1 rsyslog-module-mysql-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-omamqp1-8.33.1-lp150.2.16.1 rsyslog-module-omamqp1-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-omhttpfs-8.33.1-lp150.2.16.1 rsyslog-module-omhttpfs-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-omtcl-8.33.1-lp150.2.16.1 rsyslog-module-omtcl-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-pgsql-8.33.1-lp150.2.16.1 rsyslog-module-pgsql-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-relp-8.33.1-lp150.2.16.1 rsyslog-module-relp-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-snmp-8.33.1-lp150.2.16.1 rsyslog-module-snmp-debuginfo-8.33.1-lp150.2.16.1 rsyslog-module-udpspoof-8.33.1-lp150.2.16.1 rsyslog-module-udpspoof-debuginfo-8.33.1-lp150.2.16.1 References: https://bugzilla.suse.com/1146872

1 0

openSUSE-SU-2019:2176-1: moderate: Security update for openldap2
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for openldap2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2176-1 Rating: moderate References: #1073313 #1111388 #1114845 #1143194 #1143273 Cross-References: CVE-2017-17740 CVE-2019-13057 CVE-2019-13565 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for openldap2 fixes the following issues: Security issue fixed: - CVE-2019-13565: Fixed an authentication bypass when using SASL authentication and session encryption (bsc#1143194). - CVE-2019-13057: Fixed an issue with delegated database admin privileges (bsc#1143273). - CVE-2017-17740: When both the nops module and the member of overlay are enabled, attempts to free a buffer that was allocated on the stack, which allows remote attackers to cause a denial of service (slapd crash) via a member MODDN operation. (bsc#1073313) Non-security issues fixed: - Fixed broken shebang line in openldap_update_modules_path.sh (bsc#1114845). - Create files in /var/lib/ldap/ during initial start to allow for transactional updates (bsc#1111388) - Fixed incorrect post script call causing tmpfiles creation not to be run (bsc#1111388). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2176=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libldap-2_4-2-2.4.46-lp150.13.1 libldap-2_4-2-debuginfo-2.4.46-lp150.13.1 openldap2-2.4.46-lp150.13.1 openldap2-back-meta-2.4.46-lp150.13.1 openldap2-back-meta-debuginfo-2.4.46-lp150.13.1 openldap2-back-perl-2.4.46-lp150.13.1 openldap2-back-perl-debuginfo-2.4.46-lp150.13.1 openldap2-back-sock-2.4.46-lp150.13.1 openldap2-back-sock-debuginfo-2.4.46-lp150.13.1 openldap2-back-sql-2.4.46-lp150.13.1 openldap2-back-sql-debuginfo-2.4.46-lp150.13.1 openldap2-client-2.4.46-lp150.13.1 openldap2-client-debuginfo-2.4.46-lp150.13.1 openldap2-contrib-2.4.46-lp150.13.1 openldap2-contrib-debuginfo-2.4.46-lp150.13.1 openldap2-debuginfo-2.4.46-lp150.13.1 openldap2-debugsource-2.4.46-lp150.13.1 openldap2-devel-2.4.46-lp150.13.1 openldap2-devel-static-2.4.46-lp150.13.1 openldap2-ppolicy-check-password-1.2-lp150.13.1 openldap2-ppolicy-check-password-debuginfo-1.2-lp150.13.1 - openSUSE Leap 15.0 (noarch): libldap-data-2.4.46-lp150.13.1 openldap2-doc-2.4.46-lp150.13.1 - openSUSE Leap 15.0 (x86_64): libldap-2_4-2-32bit-2.4.46-lp150.13.1 libldap-2_4-2-32bit-debuginfo-2.4.46-lp150.13.1 openldap2-devel-32bit-2.4.46-lp150.13.1 References: https://www.suse.com/security/cve/CVE-2017-17740.html https://www.suse.com/security/cve/CVE-2019-13057.html https://www.suse.com/security/cve/CVE-2019-13565.html https://bugzilla.suse.com/1073313 https://bugzilla.suse.com/1111388 https://bugzilla.suse.com/1114845 https://bugzilla.suse.com/1143194 https://bugzilla.suse.com/1143273

1 0

openSUSE-SU-2019:2175-1: moderate: Security update for util-linux and shadow
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for util-linux and shadow ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2175-1 Rating: moderate References: #1081947 #1082293 #1085196 #1106214 #1121197 #1122417 #1125886 #1135534 #1135708 #353876 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for util-linux and shadow fixes the following issues: util-linux: - Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Prevent outdated pam files (bsc#1082293). - Do not trim read-only volumes (bsc#1106214). - Integrate pam_keyinit pam module to login (bsc#1081947). - Perform one-time reset of /etc/default/su (bsc#1121197). - Fix problems in reading of login.defs values (bsc#1121197) - libmount: To prevent incorrect behavior, recognize more pseudofs and netfs (bsc#1122417). - raw.service: Add RemainAfterExit=yes (bsc#1135534). - agetty: Return previous response of agetty for special characters (bsc#1085196, bsc#1125886) - Fix /etc/default/su comments and create /etc/default/runuser (bsc#1121197). shadow: - Fixed an issue where PATH settings in /etc/default/su being ignored (bsc#1121197) - Hardening for su wrappers (bsc#353876) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2175=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): libblkid-devel-2.31.1-lp150.7.10.2 libblkid-devel-static-2.31.1-lp150.7.10.2 libblkid1-2.31.1-lp150.7.10.2 libblkid1-debuginfo-2.31.1-lp150.7.10.2 libfdisk-devel-2.31.1-lp150.7.10.2 libfdisk-devel-static-2.31.1-lp150.7.10.2 libfdisk1-2.31.1-lp150.7.10.2 libfdisk1-debuginfo-2.31.1-lp150.7.10.2 libmount-devel-2.31.1-lp150.7.10.2 libmount-devel-static-2.31.1-lp150.7.10.2 libmount1-2.31.1-lp150.7.10.2 libmount1-debuginfo-2.31.1-lp150.7.10.2 libsmartcols-devel-2.31.1-lp150.7.10.2 libsmartcols-devel-static-2.31.1-lp150.7.10.2 libsmartcols1-2.31.1-lp150.7.10.2 libsmartcols1-debuginfo-2.31.1-lp150.7.10.2 libuuid-devel-2.31.1-lp150.7.10.2 libuuid-devel-static-2.31.1-lp150.7.10.2 libuuid1-2.31.1-lp150.7.10.2 libuuid1-debuginfo-2.31.1-lp150.7.10.2 shadow-4.5-lp150.11.2 shadow-debuginfo-4.5-lp150.11.2 shadow-debugsource-4.5-lp150.11.2 util-linux-2.31.1-lp150.7.10.2 util-linux-debuginfo-2.31.1-lp150.7.10.2 util-linux-debugsource-2.31.1-lp150.7.10.2 - openSUSE Leap 15.0 (noarch): util-linux-lang-2.31.1-lp150.7.10.2 - openSUSE Leap 15.0 (x86_64): libblkid-devel-32bit-2.31.1-lp150.7.10.2 libblkid1-32bit-2.31.1-lp150.7.10.2 libblkid1-32bit-debuginfo-2.31.1-lp150.7.10.2 libmount-devel-32bit-2.31.1-lp150.7.10.2 libmount1-32bit-2.31.1-lp150.7.10.2 libmount1-32bit-debuginfo-2.31.1-lp150.7.10.2 libuuid-devel-32bit-2.31.1-lp150.7.10.2 libuuid1-32bit-2.31.1-lp150.7.10.2 libuuid1-32bit-debuginfo-2.31.1-lp150.7.10.2 References: https://bugzilla.suse.com/1081947 https://bugzilla.suse.com/1082293 https://bugzilla.suse.com/1085196 https://bugzilla.suse.com/1106214 https://bugzilla.suse.com/1121197 https://bugzilla.suse.com/1122417 https://bugzilla.suse.com/1125886 https://bugzilla.suse.com/1135534 https://bugzilla.suse.com/1135708 https://bugzilla.suse.com/353876

1 0

openSUSE-RU-2019:2166-1: moderate: Recommended update for desktop-file-utils
by maintenance＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Recommended Update: Recommended update for desktop-file-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2166-1 Rating: moderate References: #1094774 #1148080 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for desktop-file-utils fixes the following issues: - Added Pantheon to desktop env list (bsc#1094774) - Fix for update-desktop-database to recognize font media types. (bsc#1148080) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2166=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): desktop-file-utils-0.23-lp150.3.3.1 desktop-file-utils-debuginfo-0.23-lp150.3.3.1 desktop-file-utils-debugsource-0.23-lp150.3.3.1 References: https://bugzilla.suse.com/1094774 https://bugzilla.suse.com/1148080

1 0

openSUSE-SU-2019:2174-1: important: Security update for ibus
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for ibus ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2174-1 Rating: important References: #1150011 Cross-References: CVE-2019-14822 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ibus fixes the following issues: Security issue fixed: - CVE-2019-14822: Fixed a misconfiguration of the DBus server that allowed an unprivileged user to monitor and send method calls to the ibus bus of another user. (bsc#1150011) This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2174=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): ibus-1.5.17-lp150.4.3.1 ibus-debuginfo-1.5.17-lp150.4.3.1 ibus-debugsource-1.5.17-lp150.4.3.1 ibus-devel-1.5.17-lp150.4.3.1 ibus-gtk-1.5.17-lp150.4.3.1 ibus-gtk-debuginfo-1.5.17-lp150.4.3.1 ibus-gtk3-1.5.17-lp150.4.3.1 ibus-gtk3-debuginfo-1.5.17-lp150.4.3.1 libibus-1_0-5-1.5.17-lp150.4.3.1 libibus-1_0-5-debuginfo-1.5.17-lp150.4.3.1 python-ibus-1.5.17-lp150.4.3.1 typelib-1_0-IBus-1_0-1.5.17-lp150.4.3.1 - openSUSE Leap 15.0 (noarch): ibus-branding-openSUSE-KDE-1.5.17-lp150.4.3.1 ibus-lang-1.5.17-lp150.4.3.1 - openSUSE Leap 15.0 (x86_64): ibus-gtk-32bit-1.5.17-lp150.4.3.1 ibus-gtk-32bit-debuginfo-1.5.17-lp150.4.3.1 ibus-gtk3-32bit-1.5.17-lp150.4.3.1 ibus-gtk3-32bit-debuginfo-1.5.17-lp150.4.3.1 libibus-1_0-5-32bit-1.5.17-lp150.4.3.1 libibus-1_0-5-32bit-debuginfo-1.5.17-lp150.4.3.1 python3-ibus-1.5.17-lp150.4.3.1 References: https://www.suse.com/security/cve/CVE-2019-14822.html https://bugzilla.suse.com/1150011

1 0

openSUSE-SU-2019:2169-1: important: Security update for curl
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2169-1 Rating: important References: #1149495 #1149496 Cross-References: CVE-2019-5481 CVE-2019-5482 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for curl fixes the following issues: Security issues fixed: - CVE-2019-5481: Fixed FTP-KRB double-free during kerberos FTP data transfer (bsc#1149495). - CVE-2019-5482: Fixed TFTP small blocksize heap buffer overflow (bsc#1149496). This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2169=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): curl-7.60.0-lp150.2.25.1 curl-debuginfo-7.60.0-lp150.2.25.1 curl-debugsource-7.60.0-lp150.2.25.1 libcurl-devel-7.60.0-lp150.2.25.1 libcurl4-7.60.0-lp150.2.25.1 libcurl4-debuginfo-7.60.0-lp150.2.25.1 - openSUSE Leap 15.0 (x86_64): libcurl-devel-32bit-7.60.0-lp150.2.25.1 libcurl4-32bit-7.60.0-lp150.2.25.1 libcurl4-32bit-debuginfo-7.60.0-lp150.2.25.1 References: https://www.suse.com/security/cve/CVE-2019-5481.html https://www.suse.com/security/cve/CVE-2019-5482.html https://bugzilla.suse.com/1149495 https://bugzilla.suse.com/1149496

1 0

openSUSE-RU-2019:2168-1: moderate: Recommended update for python-cairo
by maintenance＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Recommended Update: Recommended update for python-cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2019:2168-1 Rating: moderate References: #1142582 Affected Products: openSUSE Leap 15.0 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-cairo does not fix any visible issues to users. This update was imported from the SUSE:SLE-15:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.0: zypper in -t patch openSUSE-2019-2168=1 Package List: - openSUSE Leap 15.0 (i586 x86_64): python-cairo-common-devel-1.15.1-lp150.2.3.1 python-cairo-debuginfo-1.15.1-lp150.2.3.1 python-cairo-debugsource-1.15.1-lp150.2.3.1 python2-cairo-1.15.1-lp150.2.3.1 python2-cairo-debuginfo-1.15.1-lp150.2.3.1 python2-cairo-devel-1.15.1-lp150.2.3.1 python3-cairo-1.15.1-lp150.2.3.1 python3-cairo-debuginfo-1.15.1-lp150.2.3.1 python3-cairo-devel-1.15.1-lp150.2.3.1 References: https://bugzilla.suse.com/1142582

1 0

openSUSE-SU-2019:2158-1: moderate: Security update for openssl-1_1
by opensuse-security＠opensuse.org 24 Sep '19

24 Sep '19

openSUSE Security Update: Security update for openssl-1_1 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2019:2158-1 Rating: moderate References: #1150003 #1150250 Cross-References: CVE-2019-1547 CVE-2019-1563 Affected Products: openSUSE Leap 15.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for openssl-1_1 fixes the following issues: OpenSSL Security Advisory [10 September 2019] * CVE-2019-1547: Added EC_GROUP_set_generator side channel attack avoidance. (bsc#1150003) * CVE-2019-1563: Fixed Bleichenbacher attack against cms/pkcs7 encryption transported key (bsc#1150250) This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.1: zypper in -t patch openSUSE-2019-2158=1 Package List: - openSUSE Leap 15.1 (i586 x86_64): libopenssl-1_1-devel-1.1.0i-lp151.8.3.1 libopenssl1_1-1.1.0i-lp151.8.3.1 libopenssl1_1-debuginfo-1.1.0i-lp151.8.3.1 libopenssl1_1-hmac-1.1.0i-lp151.8.3.1 openssl-1_1-1.1.0i-lp151.8.3.1 openssl-1_1-debuginfo-1.1.0i-lp151.8.3.1 openssl-1_1-debugsource-1.1.0i-lp151.8.3.1 - openSUSE Leap 15.1 (x86_64): libopenssl-1_1-devel-32bit-1.1.0i-lp151.8.3.1 libopenssl1_1-32bit-1.1.0i-lp151.8.3.1 libopenssl1_1-32bit-debuginfo-1.1.0i-lp151.8.3.1 libopenssl1_1-hmac-32bit-1.1.0i-lp151.8.3.1 - openSUSE Leap 15.1 (noarch): openssl-1_1-doc-1.1.0i-lp151.8.3.1 References: https://www.suse.com/security/cve/CVE-2019-1547.html https://www.suse.com/security/cve/CVE-2019-1563.html https://bugzilla.suse.com/1150003 https://bugzilla.suse.com/1150250

1 0