April 2018 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2018:1104-1: moderate: Security update for Chromium
by opensuse-security＠opensuse.org 30 Apr '18

30 Apr '18

openSUSE Security Update: Security update for Chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1104-1 Rating: moderate References: #1091288 Cross-References: CVE-2018-6118 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for Chromium to version 66.0.3359.139 addresses the following issues: - CVE-2018-6118: Use after free in Media Cache (boo#1091288) Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-406=1 Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-66.0.3359.139-155.1 chromedriver-debuginfo-66.0.3359.139-155.1 chromium-66.0.3359.139-155.1 chromium-debuginfo-66.0.3359.139-155.1 chromium-debugsource-66.0.3359.139-155.1 References: https://www.suse.com/security/cve/CVE-2018-6118.html https://bugzilla.suse.com/1091288

1 0

openSUSE-SU-2018:1101-1: moderate: Security update for mysql-community-server
by opensuse-security＠opensuse.org 27 Apr '18

27 Apr '18

openSUSE Security Update: Security update for mysql-community-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1101-1 Rating: moderate References: #1089987 Cross-References: CVE-2018-2755 CVE-2018-2758 CVE-2018-2761 CVE-2018-2766 CVE-2018-2771 CVE-2018-2773 CVE-2018-2781 CVE-2018-2782 CVE-2018-2784 CVE-2018-2787 CVE-2018-2805 CVE-2018-2813 CVE-2018-2817 CVE-2018-2818 CVE-2018-2819 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 15 vulnerabilities is now available. Description: This update for mysql-community-server to version 5.6.40 fixes the following issues: Security issues fixed: - CVE-2018-2755: Unspecified vulnerability in the Replication component - CVE-2018-2819: Unspecified vulnerability in the InnoDB component - CVE-2018-2817: Unspecified vulnerability in the Server DDL component - CVE-2018-2761: Unspecified vulnerability in the client programs - CVE-2018-2818: Unspecified vulnerability in the Server Security Privileges component - CVE-2018-2781: Unspecified vulnerability in the Server Optimizer component - CVE-2018-2771: Unspecified vulnerability in the Server locking component - CVE-2018-2813: Unspecified vulnerability in the Server DDL component - CVE-2018-2773: Unspecified vulnerability in the client programs - CVE-2018-2758: Unspecified vulnerability in the Server Security Privileges component - CVE-2018-2805: Unspecified vulnerability in the GIS Extension - CVE-2018-2782: Unspecified vulnerability in the InnoDB component - CVE-2018-2784: Unspecified vulnerability in the InnoDB component - CVE-2018-2787: Unspecified vulnerability in the InnoDB component - CVE-2018-2766: Unspecified vulnerability in the InnoDB component This update also contains all upstream fixes and improvement in the 5.6.40 release: http://dev.mysql.com/doc/relnotes/mysql/5.6/en/news-5-6-40.html Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-405=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libmysql56client18-5.6.40-36.1 libmysql56client18-debuginfo-5.6.40-36.1 libmysql56client_r18-5.6.40-36.1 mysql-community-server-5.6.40-36.1 mysql-community-server-bench-5.6.40-36.1 mysql-community-server-bench-debuginfo-5.6.40-36.1 mysql-community-server-client-5.6.40-36.1 mysql-community-server-client-debuginfo-5.6.40-36.1 mysql-community-server-debuginfo-5.6.40-36.1 mysql-community-server-debugsource-5.6.40-36.1 mysql-community-server-test-5.6.40-36.1 mysql-community-server-test-debuginfo-5.6.40-36.1 mysql-community-server-tools-5.6.40-36.1 mysql-community-server-tools-debuginfo-5.6.40-36.1 - openSUSE Leap 42.3 (x86_64): libmysql56client18-32bit-5.6.40-36.1 libmysql56client18-debuginfo-32bit-5.6.40-36.1 libmysql56client_r18-32bit-5.6.40-36.1 - openSUSE Leap 42.3 (noarch): mysql-community-server-errormessages-5.6.40-36.1 References: https://www.suse.com/security/cve/CVE-2018-2755.html https://www.suse.com/security/cve/CVE-2018-2758.html https://www.suse.com/security/cve/CVE-2018-2761.html https://www.suse.com/security/cve/CVE-2018-2766.html https://www.suse.com/security/cve/CVE-2018-2771.html https://www.suse.com/security/cve/CVE-2018-2773.html https://www.suse.com/security/cve/CVE-2018-2781.html https://www.suse.com/security/cve/CVE-2018-2782.html https://www.suse.com/security/cve/CVE-2018-2784.html https://www.suse.com/security/cve/CVE-2018-2787.html https://www.suse.com/security/cve/CVE-2018-2805.html https://www.suse.com/security/cve/CVE-2018-2813.html https://www.suse.com/security/cve/CVE-2018-2817.html https://www.suse.com/security/cve/CVE-2018-2818.html https://www.suse.com/security/cve/CVE-2018-2819.html https://bugzilla.suse.com/1089987

1 0

openSUSE-RU-2018:1100-1: Recommended update for yast2-installation, yast2-storage
by maintenance＠opensuse.org 27 Apr '18

27 Apr '18

openSUSE Recommended Update: Recommended update for yast2-installation, yast2-storage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1100-1 Rating: low References: #1036838 #1042554 #1051200 #1051762 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for yast2-installation and yast2-storage provides the following fixes: Fixes for yast2-installation: - Update YaST2-Firstboot.service: Deprecate `plymouth --wait` and add conflict to plymouth start service. - Update YaST2-Second-Stage.service: Deprecate the plymouth deactivate command and add conflict to plymouth start service. (bsc#1042554) - Make filesystem type for home and root configurable in control.xml. (bsc#1051762) - Allow different mount point for home partition. (fate#323532, bsc#1051200) - Move remaining CaaSP specific code to yast2-caasp package. (bsc#1036838, bsc#1051200) Fixes for yast2-storage: - Make filesystem type for home and root configurable in control.xml. (bsc#1051762) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-403=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-storage-3.2.16.2-6.1 yast2-storage-debuginfo-3.2.16.2-6.1 yast2-storage-debugsource-3.2.16.2-6.1 yast2-storage-devel-3.2.16.2-6.1 - openSUSE Leap 42.3 (noarch): yast2-installation-3.2.50-2.3.1 References: https://bugzilla.suse.com/1036838 https://bugzilla.suse.com/1042554 https://bugzilla.suse.com/1051200 https://bugzilla.suse.com/1051762

1 0

openSUSE-RU-2018:1098-1: Recommended update for nfs-utils
by maintenance＠opensuse.org 27 Apr '18

27 Apr '18

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1098-1 Rating: low References: #1017909 #1040968 #1053691 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for nfs-utils provides the following fixes: - Fix nfs-client's service dependency so that when YaST restarts "nfs" the action is propagated to "nfs-client" as well. (bsc#1053691) - Allow umount to work when NFS server is down. (bsc#1040968) - Fix exit code of nfsstat(8). (bsc#1017909) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-404=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): nfs-client-1.3.0-29.3.1 nfs-client-debuginfo-1.3.0-29.3.1 nfs-doc-1.3.0-29.3.1 nfs-kernel-server-1.3.0-29.3.1 nfs-kernel-server-debuginfo-1.3.0-29.3.1 nfs-utils-debugsource-1.3.0-29.3.1 References: https://bugzilla.suse.com/1017909 https://bugzilla.suse.com/1040968 https://bugzilla.suse.com/1053691

1 0

openSUSE-RU-2018:1097-1: Recommended update for plasma5-integration
by maintenance＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Recommended Update: Recommended update for plasma5-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1097-1 Rating: low References: #1085364 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-integration fixes the following issues: - boo#1085364: The KDE remote file dialog did not show the last used path correctly Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-401=1 Package List: - openSUSE Leap 42.3 (x86_64): plasma5-integration-debugsource-5.9.4-4.6.1 plasma5-integration-plugin-5.9.4-4.6.1 plasma5-integration-plugin-debuginfo-5.9.4-4.6.1 - openSUSE Leap 42.3 (noarch): plasma5-integration-plugin-lang-5.9.4-4.6.1 References: https://bugzilla.suse.com/1085364

1 0

openSUSE-RU-2018:1096-1: moderate: Recommended update for LibreOffice
by maintenance＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Recommended Update: Recommended update for LibreOffice ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1096-1 Rating: moderate References: #1042829 #1077375 #1080249 #1083213 #1083993 #1088662 #1089124 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves four vulnerabilities and has three fixes is now available. Description: LibreOffice was updated to version 6.0.3. Following new features were added: - The Notebookbar, although still an experimental feature, has been enriched with two new variants: Grouped Bar Full for Writer, Calc and Impress, and Tabbed Compact for Writer. The Special Characters dialog has been reworked, with the addition of lists for Recent and Favorite characters, along with a Search field. The Customize dialog has also been redesigned, and is now more modern and intuitive. - In Writer, a Form menu has been added, making it easier to access one of the most powerful – and often unknown – LibreOffice features: the ability to design forms, and create standards-compliant PDF forms. The Find toolbar has been enhanced with a drop-down list of search types, to speed up navigation. A new default table style has been added, together with a new collection of table styles to reflect evolving visual trends. - The Mail Merge function has been improved, and it is now possible to use either a Writer document or an XLSX file as data source. - In Calc, ODF 1.2-compliant functions SEARCHB, FINDB and REPLACEB have been added, to improve support for the ISO standard format. Also, a cell range selection or a selected group of shapes (images) can be now exported in PNG or JPG format. - In Impress, the default slide size has been switched to 16:9, to support the most recent form factors of screens and projectors. As a consequence, 10 new Impress templates have been added, and a couple of old templates have been updated. Changes in components: - The old WikiHelp has been replaced by the new Help Online system, with attractive web pages that can also be displayed on mobile devices. In general, LibreOffice Help has been updated both in terms of contents and code, with other improvements due all along the life of the LibreOffice 6 family. - User dictionaries now allow automatic affixation or compounding. This is a general spell checking improvement in LibreOffice which can speed up work for Writer users. Instead of manually handling several forms of a new word in a language with rich morphology or compounding, the Hunspell spell checker can automatically recognize a new word with affixes or compounds, based on a “Grammar By” model. Security features and changes: - OpenPGP keys can be used to sign ODF documents on all desktop operating systems, with experimental support for OpenPGP-based encryption. To enable this feature, users will have to install the specific GPG software for their operating systems. - Document classification has also been improved, and allows multiple policies (which are now exported to OOXML files). In Writer, marking and signing are now supported at paragraph level. Interoperability changes: - OOXML interoperability has been improved in several areas: import of SmartArt and import/export of ActiveX controls, support of embedded text documents and spreadsheets, export of embedded videos to PPTX, export of cross-references to DOCX, export of MailMerge fields to DOCX, and improvements to the PPTX filter to prevent the creation of broken files. - New filters for exporting Writer documents to ePub and importing QuarkXPress files have also been added, together with an improved filter for importing EMF+ (Enhanced Metafile Format Plus) files as used by Microsoft Office documents. Some improvements have also been added to the ODF export filter, making it easier for other ODF readers to display visuals. The full blog entry for the 6.0 release can be found here: https://blog.documentfoundation.org/blog/2018/01/31/libreoffice-6/ The full release notes can be found here: https://wiki.documentfoundation.org/ReleaseNotes/6.0 The libraries that LibreOffice depends on also have been udpated to their current versions. This update was imported from multiple SLES update projects. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-402=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libixion-0_13-0-0.13.0-2.3.1 libixion-0_13-0-debuginfo-0.13.0-2.3.1 libixion-debugsource-0.13.0-2.3.1 libixion-devel-0.13.0-2.3.1 libixion-tools-0.13.0-2.3.1 libixion-tools-debuginfo-0.13.0-2.3.1 liborcus-0_13-0-0.13.4-2.3.1 liborcus-0_13-0-debuginfo-0.13.4-2.3.1 liborcus-debugsource-0.13.4-2.3.1 liborcus-devel-0.13.4-2.3.1 liborcus-tools-0.13.4-2.3.1 liborcus-tools-debuginfo-0.13.4-2.3.1 myspell-dictionaries-20180403-7.1 myspell-lightproof-en-20180403-7.1 myspell-lightproof-hu_HU-20180403-7.1 myspell-lightproof-pt_BR-20180403-7.1 myspell-lightproof-ru_RU-20180403-7.1 python3-libixion-0.13.0-2.3.1 python3-libixion-debuginfo-0.13.0-2.3.1 python3-liborcus-0.13.4-2.3.1 python3-liborcus-debuginfo-0.13.4-2.3.1 - openSUSE Leap 42.3 (x86_64): gnome-books-3.20.1-8.1 gnome-documents-3.20.1-8.1 gnome-documents-debugsource-3.20.1-8.1 gnome-documents_books-common-3.20.1-8.1 gnome-documents_books-common-debuginfo-3.20.1-8.1 gnome-shell-search-provider-documents-3.20.1-8.1 libepubgen-0_1-1-0.1.0-14.1 libepubgen-0_1-1-debuginfo-0.1.0-14.1 libepubgen-debugsource-0.1.0-14.1 libepubgen-devel-0.1.0-14.1 libmwaw-0_3-3-0.3.13-2.3.1 libmwaw-0_3-3-debuginfo-0.3.13-2.3.1 libmwaw-debugsource-0.3.13-2.3.1 libmwaw-devel-0.3.13-2.3.1 libmwaw-tools-0.3.13-2.3.1 libmwaw-tools-debuginfo-0.3.13-2.3.1 libqxp-0_0-0-0.0.1-2.1 libqxp-0_0-0-debuginfo-0.0.1-2.1 libqxp-debugsource-0.0.1-2.1 libqxp-devel-0.0.1-2.1 libqxp-tools-0.0.1-2.1 libqxp-tools-debuginfo-0.0.1-2.1 libreoffice-6.0.3.2-18.1 libreoffice-base-6.0.3.2-18.1 libreoffice-base-debuginfo-6.0.3.2-18.1 libreoffice-base-drivers-mysql-6.0.3.2-18.1 libreoffice-base-drivers-mysql-debuginfo-6.0.3.2-18.1 libreoffice-base-drivers-postgresql-6.0.3.2-18.1 libreoffice-base-drivers-postgresql-debuginfo-6.0.3.2-18.1 libreoffice-calc-6.0.3.2-18.1 libreoffice-calc-debuginfo-6.0.3.2-18.1 libreoffice-calc-extensions-6.0.3.2-18.1 libreoffice-debuginfo-6.0.3.2-18.1 libreoffice-debugsource-6.0.3.2-18.1 libreoffice-draw-6.0.3.2-18.1 libreoffice-draw-debuginfo-6.0.3.2-18.1 libreoffice-filters-optional-6.0.3.2-18.1 libreoffice-gnome-6.0.3.2-18.1 libreoffice-gnome-debuginfo-6.0.3.2-18.1 libreoffice-gtk2-6.0.3.2-18.1 libreoffice-gtk2-debuginfo-6.0.3.2-18.1 libreoffice-gtk3-6.0.3.2-18.1 libreoffice-gtk3-debuginfo-6.0.3.2-18.1 libreoffice-impress-6.0.3.2-18.1 libreoffice-impress-debuginfo-6.0.3.2-18.1 libreoffice-kde4-6.0.3.2-18.1 libreoffice-kde4-debuginfo-6.0.3.2-18.1 libreoffice-mailmerge-6.0.3.2-18.1 libreoffice-math-6.0.3.2-18.1 libreoffice-math-debuginfo-6.0.3.2-18.1 libreoffice-officebean-6.0.3.2-18.1 libreoffice-officebean-debuginfo-6.0.3.2-18.1 libreoffice-pyuno-6.0.3.2-18.1 libreoffice-pyuno-debuginfo-6.0.3.2-18.1 libreoffice-sdk-6.0.3.2-18.1 libreoffice-sdk-debuginfo-6.0.3.2-18.1 libreoffice-sdk-doc-6.0.3.2-18.1 libreoffice-writer-6.0.3.2-18.1 libreoffice-writer-debuginfo-6.0.3.2-18.1 libreoffice-writer-extensions-6.0.3.2-18.1 libreofficekit-6.0.3.2-18.1 libreofficekit-devel-6.0.3.2-18.1 libstaroffice-0_0-0-0.0.5-2.3.1 libstaroffice-0_0-0-debuginfo-0.0.5-2.3.1 libstaroffice-debugsource-0.0.5-2.3.1 libstaroffice-devel-0.0.5-2.3.1 libstaroffice-tools-0.0.5-2.3.1 libstaroffice-tools-debuginfo-0.0.5-2.3.1 libwps-0_4-4-0.4.7-14.1 libwps-0_4-4-debuginfo-0.4.7-14.1 libwps-debugsource-0.4.7-14.1 libwps-devel-0.4.7-14.1 libwps-tools-0.4.7-14.1 libwps-tools-debuginfo-0.4.7-14.1 - openSUSE Leap 42.3 (noarch): gnome-documents-lang-3.20.1-8.1 libepubgen-devel-doc-0.1.0-14.1 libmwaw-devel-doc-0.3.13-2.3.1 libqxp-doc-0.0.1-2.1 libreoffice-branding-upstream-6.0.3.2-18.1 libreoffice-gdb-pretty-printers-6.0.3.2-18.1 libreoffice-glade-6.0.3.2-18.1 libreoffice-icon-themes-6.0.3.2-18.1 libreoffice-l10n-af-6.0.3.2-18.1 libreoffice-l10n-ar-6.0.3.2-18.1 libreoffice-l10n-as-6.0.3.2-18.1 libreoffice-l10n-bg-6.0.3.2-18.1 libreoffice-l10n-bn-6.0.3.2-18.1 libreoffice-l10n-br-6.0.3.2-18.1 libreoffice-l10n-ca-6.0.3.2-18.1 libreoffice-l10n-cs-6.0.3.2-18.1 libreoffice-l10n-cy-6.0.3.2-18.1 libreoffice-l10n-da-6.0.3.2-18.1 libreoffice-l10n-de-6.0.3.2-18.1 libreoffice-l10n-dz-6.0.3.2-18.1 libreoffice-l10n-el-6.0.3.2-18.1 libreoffice-l10n-en-6.0.3.2-18.1 libreoffice-l10n-eo-6.0.3.2-18.1 libreoffice-l10n-es-6.0.3.2-18.1 libreoffice-l10n-et-6.0.3.2-18.1 libreoffice-l10n-eu-6.0.3.2-18.1 libreoffice-l10n-fa-6.0.3.2-18.1 libreoffice-l10n-fi-6.0.3.2-18.1 libreoffice-l10n-fr-6.0.3.2-18.1 libreoffice-l10n-ga-6.0.3.2-18.1 libreoffice-l10n-gl-6.0.3.2-18.1 libreoffice-l10n-gu-6.0.3.2-18.1 libreoffice-l10n-he-6.0.3.2-18.1 libreoffice-l10n-hi-6.0.3.2-18.1 libreoffice-l10n-hr-6.0.3.2-18.1 libreoffice-l10n-hu-6.0.3.2-18.1 libreoffice-l10n-it-6.0.3.2-18.1 libreoffice-l10n-ja-6.0.3.2-18.1 libreoffice-l10n-kk-6.0.3.2-18.1 libreoffice-l10n-kn-6.0.3.2-18.1 libreoffice-l10n-ko-6.0.3.2-18.1 libreoffice-l10n-lt-6.0.3.2-18.1 libreoffice-l10n-lv-6.0.3.2-18.1 libreoffice-l10n-mai-6.0.3.2-18.1 libreoffice-l10n-ml-6.0.3.2-18.1 libreoffice-l10n-mr-6.0.3.2-18.1 libreoffice-l10n-nb-6.0.3.2-18.1 libreoffice-l10n-nl-6.0.3.2-18.1 libreoffice-l10n-nn-6.0.3.2-18.1 libreoffice-l10n-nr-6.0.3.2-18.1 libreoffice-l10n-nso-6.0.3.2-18.1 libreoffice-l10n-or-6.0.3.2-18.1 libreoffice-l10n-pa-6.0.3.2-18.1 libreoffice-l10n-pl-6.0.3.2-18.1 libreoffice-l10n-pt_BR-6.0.3.2-18.1 libreoffice-l10n-pt_PT-6.0.3.2-18.1 libreoffice-l10n-ro-6.0.3.2-18.1 libreoffice-l10n-ru-6.0.3.2-18.1 libreoffice-l10n-si-6.0.3.2-18.1 libreoffice-l10n-sk-6.0.3.2-18.1 libreoffice-l10n-sl-6.0.3.2-18.1 libreoffice-l10n-sr-6.0.3.2-18.1 libreoffice-l10n-ss-6.0.3.2-18.1 libreoffice-l10n-st-6.0.3.2-18.1 libreoffice-l10n-sv-6.0.3.2-18.1 libreoffice-l10n-ta-6.0.3.2-18.1 libreoffice-l10n-te-6.0.3.2-18.1 libreoffice-l10n-th-6.0.3.2-18.1 libreoffice-l10n-tn-6.0.3.2-18.1 libreoffice-l10n-tr-6.0.3.2-18.1 libreoffice-l10n-ts-6.0.3.2-18.1 libreoffice-l10n-uk-6.0.3.2-18.1 libreoffice-l10n-ve-6.0.3.2-18.1 libreoffice-l10n-xh-6.0.3.2-18.1 libreoffice-l10n-zh_CN-6.0.3.2-18.1 libreoffice-l10n-zh_TW-6.0.3.2-18.1 libreoffice-l10n-zu-6.0.3.2-18.1 libstaroffice-devel-doc-0.0.5-2.3.1 myspell-af_NA-20180403-7.1 myspell-af_ZA-20180403-7.1 myspell-an-20180403-7.1 myspell-an_ES-20180403-7.1 myspell-ar-20180403-7.1 myspell-ar_AE-20180403-7.1 myspell-ar_BH-20180403-7.1 myspell-ar_DZ-20180403-7.1 myspell-ar_EG-20180403-7.1 myspell-ar_IQ-20180403-7.1 myspell-ar_JO-20180403-7.1 myspell-ar_KW-20180403-7.1 myspell-ar_LB-20180403-7.1 myspell-ar_LY-20180403-7.1 myspell-ar_MA-20180403-7.1 myspell-ar_OM-20180403-7.1 myspell-ar_QA-20180403-7.1 myspell-ar_SA-20180403-7.1 myspell-ar_SD-20180403-7.1 myspell-ar_SY-20180403-7.1 myspell-ar_TN-20180403-7.1 myspell-ar_YE-20180403-7.1 myspell-be_BY-20180403-7.1 myspell-bg_BG-20180403-7.1 myspell-bn_BD-20180403-7.1 myspell-bn_IN-20180403-7.1 myspell-bo-20180403-7.1 myspell-bo_CN-20180403-7.1 myspell-bo_IN-20180403-7.1 myspell-br_FR-20180403-7.1 myspell-bs-20180403-7.1 myspell-bs_BA-20180403-7.1 myspell-ca-20180403-7.1 myspell-ca_AD-20180403-7.1 myspell-ca_ES-20180403-7.1 myspell-ca_ES_valencia-20180403-7.1 myspell-ca_FR-20180403-7.1 myspell-ca_IT-20180403-7.1 myspell-cs_CZ-20180403-7.1 myspell-da_DK-20180403-7.1 myspell-de-20180403-7.1 myspell-de_AT-20180403-7.1 myspell-de_CH-20180403-7.1 myspell-de_DE-20180403-7.1 myspell-el_GR-20180403-7.1 myspell-en-20180403-7.1 myspell-en_AU-20180403-7.1 myspell-en_BS-20180403-7.1 myspell-en_BZ-20180403-7.1 myspell-en_CA-20180403-7.1 myspell-en_GB-20180403-7.1 myspell-en_GH-20180403-7.1 myspell-en_IE-20180403-7.1 myspell-en_IN-20180403-7.1 myspell-en_JM-20180403-7.1 myspell-en_MW-20180403-7.1 myspell-en_NA-20180403-7.1 myspell-en_NZ-20180403-7.1 myspell-en_PH-20180403-7.1 myspell-en_TT-20180403-7.1 myspell-en_US-20180403-7.1 myspell-en_ZA-20180403-7.1 myspell-en_ZW-20180403-7.1 myspell-es-20180403-7.1 myspell-es_AR-20180403-7.1 myspell-es_BO-20180403-7.1 myspell-es_CL-20180403-7.1 myspell-es_CO-20180403-7.1 myspell-es_CR-20180403-7.1 myspell-es_CU-20180403-7.1 myspell-es_DO-20180403-7.1 myspell-es_EC-20180403-7.1 myspell-es_ES-20180403-7.1 myspell-es_GT-20180403-7.1 myspell-es_HN-20180403-7.1 myspell-es_MX-20180403-7.1 myspell-es_NI-20180403-7.1 myspell-es_PA-20180403-7.1 myspell-es_PE-20180403-7.1 myspell-es_PR-20180403-7.1 myspell-es_PY-20180403-7.1 myspell-es_SV-20180403-7.1 myspell-es_UY-20180403-7.1 myspell-es_VE-20180403-7.1 myspell-et_EE-20180403-7.1 myspell-fr_BE-20180403-7.1 myspell-fr_CA-20180403-7.1 myspell-fr_CH-20180403-7.1 myspell-fr_FR-20180403-7.1 myspell-fr_LU-20180403-7.1 myspell-fr_MC-20180403-7.1 myspell-gd_GB-20180403-7.1 myspell-gl-20180403-7.1 myspell-gl_ES-20180403-7.1 myspell-gu_IN-20180403-7.1 myspell-gug-20180403-7.1 myspell-gug_PY-20180403-7.1 myspell-he_IL-20180403-7.1 myspell-hi_IN-20180403-7.1 myspell-hr_HR-20180403-7.1 myspell-hu_HU-20180403-7.1 myspell-id-20180403-7.1 myspell-id_ID-20180403-7.1 myspell-is-20180403-7.1 myspell-is_IS-20180403-7.1 myspell-it_IT-20180403-7.1 myspell-kmr_Latn-20180403-7.1 myspell-kmr_Latn_SY-20180403-7.1 myspell-kmr_Latn_TR-20180403-7.1 myspell-lo_LA-20180403-7.1 myspell-lt_LT-20180403-7.1 myspell-lv_LV-20180403-7.1 myspell-nb_NO-20180403-7.1 myspell-ne_NP-20180403-7.1 myspell-nl_BE-20180403-7.1 myspell-nl_NL-20180403-7.1 myspell-nn_NO-20180403-7.1 myspell-no-20180403-7.1 myspell-oc_FR-20180403-7.1 myspell-pl_PL-20180403-7.1 myspell-pt_AO-20180403-7.1 myspell-pt_BR-20180403-7.1 myspell-pt_PT-20180403-7.1 myspell-ro-20180403-7.1 myspell-ro_RO-20180403-7.1 myspell-ru_RU-20180403-7.1 myspell-si_LK-20180403-7.1 myspell-sk_SK-20180403-7.1 myspell-sl_SI-20180403-7.1 myspell-sq_AL-20180403-7.1 myspell-sr-20180403-7.1 myspell-sr_CS-20180403-7.1 myspell-sr_Latn_CS-20180403-7.1 myspell-sr_Latn_RS-20180403-7.1 myspell-sr_RS-20180403-7.1 myspell-sv_FI-20180403-7.1 myspell-sv_SE-20180403-7.1 myspell-sw_TZ-20180403-7.1 myspell-te-20180403-7.1 myspell-te_IN-20180403-7.1 myspell-th_TH-20180403-7.1 myspell-uk_UA-20180403-7.1 myspell-vi-20180403-7.1 myspell-vi_VN-20180403-7.1 myspell-zu_ZA-20180403-7.1 References: https://www.suse.com/security/cve/CVE-2017-9432.html https://www.suse.com/security/cve/CVE-2017-9433.html https://www.suse.com/security/cve/CVE-2018-1055.html https://www.suse.com/security/cve/CVE-2018-6871.html https://bugzilla.suse.com/1042829 https://bugzilla.suse.com/1077375 https://bugzilla.suse.com/1080249 https://bugzilla.suse.com/1083213 https://bugzilla.suse.com/1083993 https://bugzilla.suse.com/1088662 https://bugzilla.suse.com/1089124

1 0

openSUSE-SU-2018:1095-1: moderate: Security update for perl
by opensuse-security＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Security Update: Security update for perl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1095-1 Rating: moderate References: #1082216 #1082233 #1082234 Cross-References: CVE-2018-6797 CVE-2018-6798 CVE-2018-6913 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for perl fixes the following issues: Security issues fixed: - CVE-2018-6913: Fixed space calculation issues in pp_pack.c (bsc#1082216). - CVE-2018-6798: Fixed heap buffer overflow in regexec.c (bsc#1082233). - CVE-2018-6797: Fixed sharp-s regexp overflow (bsc#1082234). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-400=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): perl-5.18.2-12.1 perl-base-5.18.2-12.1 perl-base-debuginfo-5.18.2-12.1 perl-debuginfo-5.18.2-12.1 perl-debugsource-5.18.2-12.1 - openSUSE Leap 42.3 (x86_64): perl-32bit-5.18.2-12.1 perl-base-32bit-5.18.2-12.1 perl-base-debuginfo-32bit-5.18.2-12.1 perl-debuginfo-32bit-5.18.2-12.1 - openSUSE Leap 42.3 (noarch): perl-doc-5.18.2-12.1 References: https://www.suse.com/security/cve/CVE-2018-6797.html https://www.suse.com/security/cve/CVE-2018-6798.html https://www.suse.com/security/cve/CVE-2018-6913.html https://bugzilla.suse.com/1082216 https://bugzilla.suse.com/1082233 https://bugzilla.suse.com/1082234

1 0

openSUSE-SU-2018:1093-1: important: Security update for zsh
by opensuse-security＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Security Update: Security update for zsh ______________________________________________________________________________ Announcement ID: openSUSE-SU-2018:1093-1 Rating: important References: #1082885 #1082975 #1082977 #1082991 #1082998 #1083002 #1083250 #1084656 #1087026 #896914 Cross-References: CVE-2014-10070 CVE-2014-10071 CVE-2014-10072 CVE-2016-10714 CVE-2017-18205 CVE-2017-18206 CVE-2018-1071 CVE-2018-1083 CVE-2018-7549 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves 9 vulnerabilities and has one errata is now available. Description: This update for zsh fixes the following issues: - CVE-2014-10070: environment variable injection could lead to local privilege escalation (bnc#1082885) - CVE-2014-10071: buffer overflow in exec.c could lead to denial of service. (bnc#1082977) - CVE-2014-10072: buffer overflow In utils.c when scanning very long directory paths for symbolic links. (bnc#1082975) - CVE-2016-10714: In zsh before 5.3, an off-by-one error resulted in undersized buffers that were intended to support PATH_MAX characters. (bnc#1083250) - CVE-2017-18205: In builtin.c when sh compatibility mode is used, a NULL pointer dereference could lead to denial of service (bnc#1082998) - CVE-2018-1071: exec.c:hashcmd() function vulnerability could lead to denial of service. (bnc#1084656) - CVE-2018-1083: Autocomplete vulnerability could lead to privilege escalation. (bnc#1087026) - CVE-2018-7549: In params.c in zsh through 5.4.2, there is a crash during a copy of an empty hash table, as demonstrated by typeset -p. (bnc#1082991) - CVE-2017-18206: buffer overrun in xsymlinks could lead to denial of service (bnc#1083002) - Autocomplete and REPORTTIME broken (bsc#896914) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-399=1 Package List: - openSUSE Leap 42.3 (x86_64): zsh-5.0.5-9.3.1 zsh-debuginfo-5.0.5-9.3.1 zsh-debugsource-5.0.5-9.3.1 zsh-htmldoc-5.0.5-9.3.1 References: https://www.suse.com/security/cve/CVE-2014-10070.html https://www.suse.com/security/cve/CVE-2014-10071.html https://www.suse.com/security/cve/CVE-2014-10072.html https://www.suse.com/security/cve/CVE-2016-10714.html https://www.suse.com/security/cve/CVE-2017-18205.html https://www.suse.com/security/cve/CVE-2017-18206.html https://www.suse.com/security/cve/CVE-2018-1071.html https://www.suse.com/security/cve/CVE-2018-1083.html https://www.suse.com/security/cve/CVE-2018-7549.html https://bugzilla.suse.com/1082885 https://bugzilla.suse.com/1082975 https://bugzilla.suse.com/1082977 https://bugzilla.suse.com/1082991 https://bugzilla.suse.com/1082998 https://bugzilla.suse.com/1083002 https://bugzilla.suse.com/1083250 https://bugzilla.suse.com/1084656 https://bugzilla.suse.com/1087026 https://bugzilla.suse.com/896914

1 0

openSUSE-RU-2018:1092-1: Recommended update for plasma5-integration
by maintenance＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Recommended Update: Recommended update for plasma5-integration ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1092-1 Rating: low References: #1085364 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for plasma5-integration fixes the following issues: - boo#1085364: The KDE remote file dialog did not show the last used path correctly Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2018-401=1 Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): plasma5-integration-plugin-5.9.4-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): plasma5-integration-plugin-lang-5.9.4-8.1 References: https://bugzilla.suse.com/1085364

1 0

openSUSE-RU-2018:1090-1: moderate: Recommended update for libsolv, libzypp
by maintenance＠opensuse.org 26 Apr '18

26 Apr '18

openSUSE Recommended Update: Recommended update for libsolv, libzypp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2018:1090-1 Rating: moderate References: #1075978 #1077635 #1079991 #1082318 #1086602 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libsolv, libzypp provides the following fixes: Changes in libsolv: - Make sure the product file comes from /etc/products.d for the fallback product search. (bsc#1086602) - Also make use of suggests for ordering packages. (bsc#1077635) - Fix bad assignment in solution refinement that led to a memory leak. (bsc#1075978) - Use license tag instead of doc in the spec file. (bsc#1082318) Changes in libzypp: - Make sure the product file comes from /etc/products.d for the fallback product search. (bsc#1086602) - Fix a memory leak in Digest.cc. (bsc#1075978) - Add /var/lib/gdm to CheckAccessDeleted blacklist to prevent showing superfluous `zypper ps -s` messages. (bsc#1079991) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2018-397=1 Package List: - openSUSE Leap 42.3 (i586 x86_64): libsolv-debugsource-0.6.34-9.1 libsolv-demo-0.6.34-9.1 libsolv-demo-debuginfo-0.6.34-9.1 libsolv-devel-0.6.34-9.1 libsolv-devel-debuginfo-0.6.34-9.1 libsolv-tools-0.6.34-9.1 libsolv-tools-debuginfo-0.6.34-9.1 libzypp-16.17.12-24.1 libzypp-debuginfo-16.17.12-24.1 libzypp-debugsource-16.17.12-24.1 libzypp-devel-16.17.12-24.1 libzypp-devel-doc-16.17.12-24.1 perl-solv-0.6.34-9.1 perl-solv-debuginfo-0.6.34-9.1 python-solv-0.6.34-9.1 python-solv-debuginfo-0.6.34-9.1 python3-solv-0.6.34-9.1 python3-solv-debuginfo-0.6.34-9.1 ruby-solv-0.6.34-9.1 ruby-solv-debuginfo-0.6.34-9.1 References: https://bugzilla.suse.com/1075978 https://bugzilla.suse.com/1077635 https://bugzilla.suse.com/1079991 https://bugzilla.suse.com/1082318 https://bugzilla.suse.com/1086602

1 0