August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2129-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 22 Aug '16

22 Aug '16

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2129-1 Rating: moderate References: #980555 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker improves the upgrade experience for an upcoming migration from 1.9.x to 1.10.x. - Add the ability to not restart the docker service during certain updates with long migration phases (boo#980555) golang-packaging was updated to 14.9.2 with a number of adjustments to go packaging macros. The following packages were re-build against the current version of go: - golang-github-cpuguy83-go-md2man - golang-github-russross-blackfriday - golang-github-shurcool-sanitized_anchor_name - golang-org-x-net - golang-org-x-text Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1012=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): golang-github-cpuguy83-go-md2man-1.0.2+git20150617.e69ac41-4.1 golang-github-cpuguy83-go-md2man-debuginfo-1.0.2+git20150617.e69ac41-4.1 golang-github-cpuguy83-go-md2man-debugsource-1.0.2+git20150617.e69ac41-4.1 golang-github-cpuguy83-go-md2man-source-1.0.2+git20150617.e69ac41-4.1 golang-github-russross-blackfriday-1.2.0+git20150720.8cec3a8-4.1 golang-github-russross-blackfriday-source-1.2.0+git20150720.8cec3a8-4.1 golang-github-shurcool-sanitized_anchor_name-0.0.0+git20150514.11a20b7-4.1 golang-github-shurcool-sanitized_anchor_name-source-0.0.0+git20150514.11a20b7-4.1 golang-org-x-net-1.4.2+git20150629.d9558e5-4.1 golang-org-x-net-source-1.4.2+git20150629.d9558e5-4.1 golang-org-x-text-1.4.2+git20150710.7c0e16d-4.1 golang-org-x-text-debuginfo-1.4.2+git20150710.7c0e16d-4.1 golang-org-x-text-debugsource-1.4.2+git20150710.7c0e16d-4.1 golang-org-x-text-source-1.4.2+git20150710.7c0e16d-4.1 golang-packaging-14.9.2-6.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.1-16.1 docker-test-1.9.1-16.1 docker-zsh-completion-1.9.1-16.1 - openSUSE Leap 42.1 (x86_64): docker-1.9.1-16.1 docker-debuginfo-1.9.1-16.1 docker-debugsource-1.9.1-16.1 References: https://bugzilla.suse.com/980555

1 0

openSUSE-SU-2016:2127-1: moderate: Security update for roundcubemail
by opensuse-security＠opensuse.org 22 Aug '16

22 Aug '16

openSUSE Security Update: Security update for roundcubemail ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2127-1 Rating: moderate References: #976988 Cross-References: CVE-2015-2181 CVE-2015-8864 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for roundcubemail updates roundcubemail to 1.0.9 and fixes the following issues: - CVE-2015-8864 XSS issue in SVG image handling [boo#976988] - CVE-2015-2181 Security issue in DBMail driver of password plugin Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch 2016-1011=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (noarch): roundcubemail-1.0.9-2.33.1 References: https://www.suse.com/security/cve/CVE-2015-2181.html https://www.suse.com/security/cve/CVE-2015-8864.html https://bugzilla.suse.com/976988

1 0

openSUSE-RU-2016:2126-1: moderate: Recommended update for gnome-control-center
by maintenance＠opensuse.org 22 Aug '16

22 Aug '16

openSUSE Recommended Update: Recommended update for gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2126-1 Rating: moderate References: #993653 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for gnome-control-center fixes the following issue: - Drop nautilus requires: nothing in g-c-c depends on nautilus' presence. Fixes boo#993653. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1010=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1010=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-control-center-3.16.4-13.1 gnome-control-center-color-3.16.4-13.1 gnome-control-center-debuginfo-3.16.4-13.1 gnome-control-center-debugsource-3.16.4-13.1 gnome-control-center-devel-3.16.4-13.1 gnome-control-center-user-faces-3.16.4-13.1 - openSUSE Leap 42.1 (noarch): gnome-control-center-lang-3.16.4-13.1 - openSUSE 13.2 (i586 x86_64): gnome-control-center-3.14.5-24.1 gnome-control-center-color-3.14.5-24.1 gnome-control-center-debuginfo-3.14.5-24.1 gnome-control-center-debugsource-3.14.5-24.1 gnome-control-center-devel-3.14.5-24.1 gnome-control-center-user-faces-3.14.5-24.1 - openSUSE 13.2 (noarch): gnome-control-center-lang-3.14.5-24.1 References: https://bugzilla.suse.com/993653

1 0

openSUSE-RU-2016:2125-1: moderate: Recommended update for grub2
by maintenance＠opensuse.org 21 Aug '16

21 Aug '16

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2125-1 Rating: moderate References: #960776 #962585 #963610 #976836 #977590 #980088 #990086 #990604 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 8 recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Fix multi-device root= kernel argument (bsc#960776) - Add SUSE_REMOVE_LINUX_ROOT_PARAM configuration option to /etc/default/grub (bsc#962585) - Fix handling of --list argument in grub2-once (bsc#980088) - Skip comments in /etc/sysconfig/bootloader (bsc#963610) - Examine variables from grub environment in 'grub2-once' (fate#319632) - Extend config-file parsing in 'grub2-once' (fate#319632) - Add support for "t" hotkey to switch to text mode (bsc#976836) - Fix default entry boot (bsc#977590) - Fix PXE booting on ARM64 boards (bsc#990086) - Use CPU timer for timekeeping on aarch64 (bsc#990604) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1009=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): grub2-2.02~beta2-86.1 grub2-branding-upstream-2.02~beta2-86.1 grub2-debuginfo-2.02~beta2-86.1 grub2-i386-pc-2.02~beta2-86.1 - openSUSE Leap 42.1 (x86_64): grub2-x86_64-efi-2.02~beta2-86.1 grub2-x86_64-xen-2.02~beta2-86.1 - openSUSE Leap 42.1 (noarch): grub2-snapper-plugin-2.02~beta2-86.1 - openSUSE Leap 42.1 (i586): grub2-i386-efi-2.02~beta2-86.1 References: https://bugzilla.suse.com/960776 https://bugzilla.suse.com/962585 https://bugzilla.suse.com/963610 https://bugzilla.suse.com/976836 https://bugzilla.suse.com/977590 https://bugzilla.suse.com/980088 https://bugzilla.suse.com/990086 https://bugzilla.suse.com/990604

1 0

openSUSE-RU-2016:2124-1: Recommended update for p11-kit
by maintenance＠opensuse.org 21 Aug '16

21 Aug '16

openSUSE Recommended Update: Recommended update for p11-kit ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2124-1 Rating: low References: #936598 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for p11-kit fixes a potential segmentation fault in expand_homedir(). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1008=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libp11-kit0-0.20.3-10.1 libp11-kit0-debuginfo-0.20.3-10.1 p11-kit-0.20.3-10.1 p11-kit-debuginfo-0.20.3-10.1 p11-kit-debugsource-0.20.3-10.1 p11-kit-devel-0.20.3-10.1 p11-kit-nss-trust-0.20.3-10.1 p11-kit-tools-0.20.3-10.1 p11-kit-tools-debuginfo-0.20.3-10.1 - openSUSE Leap 42.1 (x86_64): libp11-kit0-32bit-0.20.3-10.1 libp11-kit0-debuginfo-32bit-0.20.3-10.1 p11-kit-32bit-0.20.3-10.1 p11-kit-debuginfo-32bit-0.20.3-10.1 References: https://bugzilla.suse.com/936598

1 0

openSUSE-RU-2016:2123-1: Recommended update for btrfsmaintenance
by maintenance＠opensuse.org 21 Aug '16

21 Aug '16

openSUSE Recommended Update: Recommended update for btrfsmaintenance ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2123-1 Rating: low References: #986543 #988189 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides btrfsmaintenance 0.2, which brings fixes and enhancements: - Update documentation - Fix logger name typos for 'journal' target - Remove hardcoded paths to external utilities - Set TRIP frequency to "weekly" by default. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1007=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): btrfsmaintenance-0.2-12.1 References: https://bugzilla.suse.com/986543 https://bugzilla.suse.com/988189

1 0

openSUSE-SU-2016:2121-1: moderate: Security update for iperf
by opensuse-security＠opensuse.org 19 Aug '16

19 Aug '16

openSUSE Security Update: Security update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2121-1 Rating: moderate References: #984453 Cross-References: CVE-2016-4303 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: iperf was updated to the the following vulnerability: - CVE-2016-4303: A malicious client could have triggered a buffer overflow / heap corruption issue by sending a specially crafted JSON string, and possibly execute arbitrary code (boo#984453) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1006=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1006=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): iperf-3.0.12-5.1 iperf-debuginfo-3.0.12-5.1 iperf-debugsource-3.0.12-5.1 iperf-devel-3.0.12-5.1 libiperf0-3.0.12-5.1 libiperf0-debuginfo-3.0.12-5.1 - openSUSE 13.2 (i586 x86_64): iperf-3.0.12-2.6.1 iperf-debuginfo-3.0.12-2.6.1 iperf-debugsource-3.0.12-2.6.1 iperf-devel-3.0.12-2.6.1 libiperf0-3.0.12-2.6.1 libiperf0-debuginfo-3.0.12-2.6.1 References: https://www.suse.com/security/cve/CVE-2016-4303.html https://bugzilla.suse.com/984453

1 0

openSUSE-SU-2016:2120-1: moderate: Security update for python3
by opensuse-security＠opensuse.org 19 Aug '16

19 Aug '16

openSUSE Security Update: Security update for python3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2120-1 Rating: moderate References: #935856 #951166 #983582 #984751 #985177 #985348 #989523 Cross-References: CVE-2014-4650 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has two fixes is now available. Description: This update for python3 fixes the following issues: - apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user supplied Proxy request header (fixes boo#989523, CVE-2016-1000110) - update to 3.4.5 check: https://docs.python.org/3.4/whatsnew/changelog.html (fixes boo#984751, CVE-2016-0772) (fixes boo#985177, CVE-2016-5636) (fixes boo#985348, CVE-2016-5699) - Bump DH parameters to 2048 bit to fix logjam security issue. boo#935856 - apply fix for CVE-2016-1000110 - CGIHandler: sets environmental variable based on user supplied Proxy request header: (fixes boo#989523, CVE-2016-1000110) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-997=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-997=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpython3_4m1_0-3.4.5-8.1 libpython3_4m1_0-debuginfo-3.4.5-8.1 python3-3.4.5-8.1 python3-base-3.4.5-8.1 python3-base-debuginfo-3.4.5-8.1 python3-base-debugsource-3.4.5-8.1 python3-curses-3.4.5-8.1 python3-curses-debuginfo-3.4.5-8.1 python3-dbm-3.4.5-8.1 python3-dbm-debuginfo-3.4.5-8.1 python3-debuginfo-3.4.5-8.1 python3-debugsource-3.4.5-8.1 python3-devel-3.4.5-8.1 python3-devel-debuginfo-3.4.5-8.1 python3-idle-3.4.5-8.1 python3-testsuite-3.4.5-8.1 python3-testsuite-debuginfo-3.4.5-8.1 python3-tk-3.4.5-8.1 python3-tk-debuginfo-3.4.5-8.1 python3-tools-3.4.5-8.1 - openSUSE Leap 42.1 (x86_64): libpython3_4m1_0-32bit-3.4.5-8.1 libpython3_4m1_0-debuginfo-32bit-3.4.5-8.1 python3-32bit-3.4.5-8.1 python3-base-32bit-3.4.5-8.1 python3-base-debuginfo-32bit-3.4.5-8.1 python3-debuginfo-32bit-3.4.5-8.1 - openSUSE Leap 42.1 (noarch): python3-doc-3.4.5-8.1 python3-doc-pdf-3.4.5-8.1 - openSUSE 13.2 (i586 x86_64): libpython3_4m1_0-3.4.5-4.4.1 libpython3_4m1_0-debuginfo-3.4.5-4.4.1 python3-3.4.5-4.4.1 python3-base-3.4.5-4.4.1 python3-base-debuginfo-3.4.5-4.4.1 python3-base-debugsource-3.4.5-4.4.1 python3-curses-3.4.5-4.4.1 python3-curses-debuginfo-3.4.5-4.4.1 python3-dbm-3.4.5-4.4.1 python3-dbm-debuginfo-3.4.5-4.4.1 python3-debuginfo-3.4.5-4.4.1 python3-debugsource-3.4.5-4.4.1 python3-devel-3.4.5-4.4.1 python3-devel-debuginfo-3.4.5-4.4.1 python3-idle-3.4.5-4.4.1 python3-testsuite-3.4.5-4.4.1 python3-testsuite-debuginfo-3.4.5-4.4.1 python3-tk-3.4.5-4.4.1 python3-tk-debuginfo-3.4.5-4.4.1 python3-tools-3.4.5-4.4.1 - openSUSE 13.2 (noarch): python3-doc-3.4.5-4.4.1 python3-doc-pdf-3.4.5-4.4.1 - openSUSE 13.2 (x86_64): libpython3_4m1_0-32bit-3.4.5-4.4.1 libpython3_4m1_0-debuginfo-32bit-3.4.5-4.4.1 python3-32bit-3.4.5-4.4.1 python3-base-32bit-3.4.5-4.4.1 python3-base-debuginfo-32bit-3.4.5-4.4.1 python3-debuginfo-32bit-3.4.5-4.4.1 References: https://www.suse.com/security/cve/CVE-2014-4650.html https://www.suse.com/security/cve/CVE-2016-0772.html https://www.suse.com/security/cve/CVE-2016-1000110.html https://www.suse.com/security/cve/CVE-2016-5636.html https://www.suse.com/security/cve/CVE-2016-5699.html https://bugzilla.suse.com/935856 https://bugzilla.suse.com/951166 https://bugzilla.suse.com/983582 https://bugzilla.suse.com/984751 https://bugzilla.suse.com/985177 https://bugzilla.suse.com/985348 https://bugzilla.suse.com/989523

1 0

openSUSE-RU-2016:2119-1: moderate: Recommended update for rkward
by maintenance＠opensuse.org 19 Aug '16

19 Aug '16

openSUSE Recommended Update: Recommended update for rkward ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2119-1 Rating: moderate References: #993268 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rkward fixes the following issues: - update rkward to 0.6.5 to make it work with R-base 3.3.1 (boo#993268) This new released contains the following changes: - Add option to override CSS file used for the output window - Added context menu option to search for information on current symbol online - Provide better status feedback when searching / filtering among installable packages - Add access to basic menu items for docked previews - Move preview controls to the button-column of dialogs - Add preview to Sort data-, Subset data, and Recode categorical data-plugins - Add preview to Power Analysis plugin - Add support for adding "htmlwidget"- and "gvis"-class objects to the output window via rk.print() - Add plugins for importing Excel files (.xls and .xlsx, Perl- and Java-based) - Add ability to extract <matrix> values row-wise in plugins - Add convenience JS-function "makeOption()" for use in plugins - Add previews for CSV, SPSS, and Stata import plugins - Allow previews for data, (HTML) output, and custom types of previews - Allow previews to be docked to the dialog window, and dock them, by default - Implicitly save code preview visibility and size (instead of the former explicit settings) - data.frame objects outside of globalenv() can be opened read-only in an editor window - Show a warning screen when invoking plugins from the command line (or from clicking an rkward://-link in an external application) - Use package type option "binary" from R 3.1.3 onwards, for automatic selection of the appropriate binary package It also contains a number of bug fixes and minor improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-998=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): rkward-0.6.5-3.1 rkward-debuginfo-0.6.5-3.1 rkward-debugsource-0.6.5-3.1 References: https://bugzilla.suse.com/993268

1 0

openSUSE-RU-2016:2118-1: Recommended update for libstoragemgmt
by maintenance＠opensuse.org 19 Aug '16

19 Aug '16

openSUSE Recommended Update: Recommended update for libstoragemgmt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2118-1 Rating: low References: #991415 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 1.3.4 for libstoragemgmt: * hpsa: Update cacheless variable Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1000=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libstoragemgmt-1.3.4-12.2 libstoragemgmt-debuginfo-1.3.4-12.2 libstoragemgmt-debugsource-1.3.4-12.2 libstoragemgmt-devel-1.3.4-12.2 libstoragemgmt-udev-1.3.4-12.2 libstoragemgmt-udev-debuginfo-1.3.4-12.2 libstoragemgmt1-1.3.4-12.2 libstoragemgmt1-debuginfo-1.3.4-12.2 python-libstoragemgmt-clibs-1.3.4-12.2 python-libstoragemgmt-clibs-debuginfo-1.3.4-12.2 - openSUSE Leap 42.1 (noarch): libstoragemgmt-hpsa-plugin-1.3.4-12.2 libstoragemgmt-megaraid-plugin-1.3.4-12.2 libstoragemgmt-netapp-plugin-1.3.4-12.2 libstoragemgmt-nstor-plugin-1.3.4-12.2 libstoragemgmt-smis-plugin-1.3.4-12.2 libstoragemgmt-targetd-plugin-1.3.4-12.2 python-libstoragemgmt-1.3.4-12.2 References: https://bugzilla.suse.com/991415

1 0