August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1951-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Aug '16

03 Aug '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1951-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh on August 1st 2016 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-936=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201608010003-137.1 References:

1 0

openSUSE-RU-2016:1934-1: moderate: Recommended update for fwts
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for fwts ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1934-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for fwts provides version 16.07.00 and fixes the following issues: - --uefi and --acpi options renamed to --uefitests and --acpitests - ACPI table tests in the acpitables test have been moved into specific ACPI tests. - cpi: acpidump: Update TCPA table and acpidump accordingly - acpi: Add ACPI TCPA test - acpi: Add XENV table test - lib: fwts_framework: Append "tests" to --uefi and --acpi - live-image/fwts-frontend-text: Update to --uefitests and --acpitests - lib: acpi, acpidump: Rename slit tables types - lib: acpi: Add in new GICC table fwts_acpi_table_gicc_affinity - acpi: Add SRAT table sanity checking (lp#1464658) - acpi: Add BERT table sanity checking (lp#1464712) - lib: acpi: Add in GAS address types - acpi: add ECDT table sanity checking (lp#1464716) - lib: acpi: Add support for the SPMI table - acpi: Add ACPI SPMI table sanity checking (lp#1465256) - acpi: Add ACPI SLIT table sanity checking (lp#1465276) - lib: acpi: Add support for the HEST family of ACPI tables - acpi: Add ACPI HEST table sanity checking (lp#1465379) - acpi: Add BOOT table test (lp#1465435) - acpi: Add DBGP table test (lp#1465441) - acpi: Add DBG2 table test (lp#1465710) - acpi: Re-organise HPET tests - acpi: Move MADT test from acpitables into new MADT test - acpi: Move GTDT test from acpitables into new GTDT test - acpi: Move XSDT test from acpitables into new XSDT test - acpi: Move RSDP test from acpitables into new RSDP test - acpi: Move RSDT test from acpitables into new RSDT test - acpi: acpitables: Remove no-op MCFG test - acpi: Move SBST test from acpitables into new SBST test - acpi: Move FADT test from acpitables into existing FADT test - acpi: acpitables: Remove redundant acpi table checking - acpi: Allow various ACPI table tests to run without root access - lib: fwts_acpi_tables: Fully pad out fixed up ACPI OEM IDs - acpi: spcr: Add missing white space in error messages - acpi: Add ACPI ERST test (lp#1467835) - acpi: Correct ACPI BGRT table type - acpi: Add ACPI BGRT test (lp#1467863) - acpi: Add ACPI CPEP test (lp#1467870) - acpi: Add ACPI FACS test (lp#1467966) - acpi: acpidump: Add in missing exponent field to SLIC - acpi: Add CSRT ACPI Table test (lp#1470116) - acpi: Add LPIT ACPI test (lp#1470184) - acpi: Add WAET ACPI table test (lp#1470495) - acpi: Add SLIC table test (lp#1470518) - acpi: Add MSDM table test (lp#1470538) - acpi: Add UEFI ACPI data table test (lp#1471698) - bios: os2gap: Remove ancient legacy test (lp#1470573) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-935=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): fwts-16.07.00-5.1 References:

1 0

openSUSE-RU-2016:1933-1: moderate: Recommended update for htop
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for htop ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1933-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for htop provides version 2.0.2 and fixes the following issues: - Mac OS X: stop trying when task_for_pid fails for a process, stops spamming logs with errors. - Add Ctrl+A and Ctrl+E to go to beginning and end of line - FreeBSD: Fixes for CPU calculation - Usability: Auto-follow process after a search. - Use Linux backend on GNU Hurd - Improvement for reproducible builds. - Fix behavior of Alt-key combinations - OpenBSD: Various fixes and improvements - FreeBSD: Fix CPU and memory readings - FreeBSD: Add battery support - Linux: Retain last-obtained name of a zombie process - Mac OS X: Improve portability for OS X versions - Mac OS X: Fix reading command-line arguments and basename - Mac OS X: Fix process state information - Mac OS X: Fix tree view collapsing/expanding - Mac OS X: Fix tree organization - Mac OS X: Fix memory accounting - Fix crash when emptying a column of meters - Make Esc key more responsive - Platform abstraction layer - Initial FreeBSD support - Initial Mac OS X support - Swap meter for Mac OSX - OpenBSD port - FreeBSD support improvements - Support for NCurses 6 ABI, including mouse wheel support - Much improved mouse responsiveness - Process environment variables screen (thanks to Michael Klein) - Higher-resolution UTF-8 based Graph mode - Show program path settings - Fix crash when scrolling an empty filtered list. - Use dynamic units for text display, and several fixes - Fix error caused by overflow in usertime calculation - Catch all memory allocation errors Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-934=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): htop-2.0.2-9.1 References:

1 0

openSUSE-SU-2016:1932-1: Security update for sqlite3
by opensuse-security＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1932-1 Rating: low References: #987394 Cross-References: CVE-2016-6153 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: - CVE-2016-6153: Tempdir Selection Vulnerability could have led to data leakage under very specific, non-default circumstances (boo#987394) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-931=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libsqlite3-0-3.8.6-3.1 libsqlite3-0-debuginfo-3.8.6-3.1 sqlite3-3.8.6-3.1 sqlite3-debuginfo-3.8.6-3.1 sqlite3-debugsource-3.8.6-3.1 sqlite3-devel-3.8.6-3.1 - openSUSE 13.2 (x86_64): libsqlite3-0-32bit-3.8.6-3.1 libsqlite3-0-debuginfo-32bit-3.8.6-3.1 - openSUSE 13.2 (noarch): sqlite3-doc-3.8.6-3.1 References: https://www.suse.com/security/cve/CVE-2016-6153.html https://bugzilla.suse.com/987394

1 0

openSUSE-RU-2016:1931-1: Recommended update for mozjs17
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for mozjs17 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1931-1 Rating: low References: #984126 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mozjs17 adds support for 48 bits virtual address space, used in the arm64 architecture. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-927=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmozjs-17_0-17.0-11.1 libmozjs-17_0-debuginfo-17.0-11.1 mozjs17-17.0-11.1 mozjs17-debugsource-17.0-11.1 mozjs17-devel-17.0-11.1 - openSUSE Leap 42.1 (x86_64): libmozjs-17_0-32bit-17.0-11.1 libmozjs-17_0-debuginfo-32bit-17.0-11.1 References: https://bugzilla.suse.com/984126

1 0

openSUSE-RU-2016:1930-1: Recommended update for aaa_base
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for aaa_base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1930-1 Rating: low References: #958295 #970395 #971567 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for aaa_base fixes the following issues: - Let the ~/.i18n values parsed as well if GDM_LANG is set. (bsc#958295) - Allow GDM to override locale. - If GDM_LANG equals system LANG then use system defaults. - Fix typo in last patch (no-systemctl support for chkconfig). (bsc#971567) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-933=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): aaa_base-13.2+git20140911.61c1681-16.1 aaa_base-debuginfo-13.2+git20140911.61c1681-16.1 aaa_base-debugsource-13.2+git20140911.61c1681-16.1 aaa_base-extras-13.2+git20140911.61c1681-16.1 aaa_base-malloccheck-13.2+git20140911.61c1681-16.1 References: https://bugzilla.suse.com/958295 https://bugzilla.suse.com/970395 https://bugzilla.suse.com/971567

1 0

openSUSE-RU-2016:1929-1: moderate: Recommended update for cairo
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for cairo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1929-1 Rating: moderate References: #987617 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for cairo fixes the following issues: - evince: fix a crash calculating polygon intersections (boo#987617) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-929=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cairo-debugsource-1.14.2-6.1 cairo-devel-1.14.2-6.1 cairo-tools-1.14.2-6.1 cairo-tools-debuginfo-1.14.2-6.1 libcairo-gobject2-1.14.2-6.1 libcairo-gobject2-debuginfo-1.14.2-6.1 libcairo-script-interpreter2-1.14.2-6.1 libcairo-script-interpreter2-debuginfo-1.14.2-6.1 libcairo2-1.14.2-6.1 libcairo2-debuginfo-1.14.2-6.1 - openSUSE Leap 42.1 (x86_64): cairo-devel-32bit-1.14.2-6.1 libcairo-gobject2-32bit-1.14.2-6.1 libcairo-gobject2-debuginfo-32bit-1.14.2-6.1 libcairo-script-interpreter2-32bit-1.14.2-6.1 libcairo-script-interpreter2-debuginfo-32bit-1.14.2-6.1 libcairo2-32bit-1.14.2-6.1 libcairo2-debuginfo-32bit-1.14.2-6.1 References: https://bugzilla.suse.com/987617

1 0

openSUSE-SU-2016:1928-1: moderate: Security update for polarssl
by opensuse-security＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Security Update: Security update for polarssl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1928-1 Rating: moderate References: #989694 Cross-References: CVE-2015-8036 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for polarssl fixes the following issues: - CVE-2015-8036: A heap-based buffer overflow could have allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a long session ticket name to the session ticket extension (boo#989694) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-932=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libpolarssl7-1.3.9-17.1 libpolarssl7-debuginfo-1.3.9-17.1 polarssl-devel-1.3.9-17.1 References: https://www.suse.com/security/cve/CVE-2015-8036.html https://bugzilla.suse.com/989694

1 0

openSUSE-RU-2016:1927-1: Recommended update for bootcycle
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for bootcycle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1927-1 Rating: low References: #978413 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for bootcycle provides the following fixes: - Adjust "halt" menu entry syntax to allow pygrub to parse it correctly. (bsc#978413) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-922=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): bootcycle-0.3-3.1 References: https://bugzilla.suse.com/978413

1 0

openSUSE-SU-2016:1926-1: moderate: Security update for mupdf
by opensuse-security＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Security Update: Security update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1926-1 Rating: moderate References: #990195 Cross-References: CVE-2016-6265 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for mupdf fixes the following issues: Security issues fixed: - CVE-2016-6265: Fixed a use-after-free issue (boo#990195). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-926=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-926=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): mupdf-1.7a-7.1 mupdf-debuginfo-1.7a-7.1 mupdf-debugsource-1.7a-7.1 mupdf-devel-static-1.7a-7.1 - openSUSE 13.2 (i586 x86_64): mupdf-1.5-2.3.1 mupdf-debuginfo-1.5-2.3.1 mupdf-debugsource-1.5-2.3.1 mupdf-devel-static-1.5-2.3.1 References: https://www.suse.com/security/cve/CVE-2016-6265.html https://bugzilla.suse.com/990195

1 0