November 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-OU-2017:3057-1: Optional update to a python-websockify to the SUSE PackageHub
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Optional Update: Optional update to a python-websockify to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:3057-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds python-websockify to the SUSE PackageHub. The package provides a WebSocket to TCP proxy/bridge, a dependency of novnc. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1293=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-websockify-0.8.0-2.1 python-websockify-common-0.8.0-2.1 python3-websockify-0.8.0-2.1 References:

1 0

openSUSE-SU-2017:3054-1: important: Security update for otrs
by opensuse-security＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Security Update: Security update for otrs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3054-1 Rating: important References: #1068677 #1069391 Cross-References: CVE-2017-15864 CVE-2017-16664 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for otrs fixes the following security issues: - CVE-2017-15864: Remote authenticated attackers could have caused otrs to disclose configuration information, including database credentials (boo#1068677, OSA-2017-06) - CVE-2017-16664: Remote authenticated attackers could have caused the execution of shell commands with the permission of the web server user (boo#1069391, OSA-2017-07) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1291=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1291=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): otrs-3.3.20-14.1 otrs-doc-3.3.20-14.1 otrs-itsm-3.3.14-14.1 - openSUSE Leap 42.2 (noarch): otrs-3.3.20-5.11.1 otrs-doc-3.3.20-5.11.1 otrs-itsm-3.3.14-5.11.1 References: https://www.suse.com/security/cve/CVE-2017-15864.html https://www.suse.com/security/cve/CVE-2017-16664.html https://bugzilla.suse.com/1068677 https://bugzilla.suse.com/1069391

1 0

openSUSE-RU-2017:3053-1: moderate: Recommended update for poppler-qt5
by maintenance＠opensuse.org 23 Nov '17

23 Nov '17

openSUSE Recommended Update: Recommended update for poppler-qt5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3053-1 Rating: moderate References: #1069393 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update makes poppler-qt5 avaiable in the SUSE PackageHub for SLES 12 SP3. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1292=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libpoppler-qt5-1-0.43.0-2.1 libpoppler-qt5-1-debuginfo-0.43.0-2.1 libpoppler-qt5-devel-0.43.0-2.1 poppler-qt5-debugsource-0.43.0-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64_ilp32): libpoppler-qt5-1-64bit-0.43.0-2.1 libpoppler-qt5-1-debuginfo-64bit-0.43.0-2.1 References: https://bugzilla.suse.com/1069393

1 0

openSUSE-RU-2017:3052-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 22 Nov '17

22 Nov '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3052-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - November 20th 2017 database refresh This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1288=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201711200006-54.106.1 References:

1 0

openSUSE-SU-2017:3051-1: important: Security update for cacti, cacti-spine
by opensuse-security＠opensuse.org 22 Nov '17

22 Nov '17

openSUSE Security Update: Security update for cacti, cacti-spine ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:3051-1 Rating: important References: #1067163 #1067164 #1067166 #1068028 Cross-References: CVE-2017-16641 CVE-2017-16660 CVE-2017-16661 CVE-2017-16785 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for cacti, cacti-spine to version 1.1.28 fixes the following issues: - CVE-2017-16641: Potential code execution vulnerability in RRDtool functions (boo#1067166) - CVE-2017-16660: Remote execution vulnerability in logging function (boo#1067164) - CVE-2017-16661: Arbitrary file read vulnerability in view log file (boo#1067163) - CVE-2017-16785: Reflection XSS vulnerability (boo#1068028) This update to version 1.1.28 also contains a number of upstream bug fixes and improvements. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1290=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1290=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): cacti-spine-1.1.28-20.1 cacti-spine-debuginfo-1.1.28-20.1 cacti-spine-debugsource-1.1.28-20.1 - openSUSE Leap 42.3 (noarch): cacti-1.1.28-29.1 cacti-doc-1.1.28-29.1 - openSUSE Leap 42.2 (i586 x86_64): cacti-spine-1.1.28-7.13.1 cacti-spine-debuginfo-1.1.28-7.13.1 cacti-spine-debugsource-1.1.28-7.13.1 - openSUSE Leap 42.2 (noarch): cacti-1.1.28-16.13.1 cacti-doc-1.1.28-16.13.1 References: https://www.suse.com/security/cve/CVE-2017-16641.html https://www.suse.com/security/cve/CVE-2017-16660.html https://www.suse.com/security/cve/CVE-2017-16661.html https://www.suse.com/security/cve/CVE-2017-16785.html https://bugzilla.suse.com/1067163 https://bugzilla.suse.com/1067164 https://bugzilla.suse.com/1067166 https://bugzilla.suse.com/1068028

1 0

openSUSE-RU-2017:3050-1: moderate: Recommended update for gnuhealth, tryton
by maintenance＠opensuse.org 22 Nov '17

22 Nov '17

openSUSE Recommended Update: Recommended update for gnuhealth, tryton ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3050-1 Rating: moderate References: #1068325 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gnuhealth, tryton contains the following bug fixes: - Fix error when signing the death certificate (health_crypto) Tryton packages were updated to the following versions, with minor code level bug fixes: - proteus 4.2.1 - tryton 4.2.8 - trytond 4.2.7 - trytond_account 4.2.4 - trytond_company 4.2.2 - trytond_product 4.2.2 - trytond_purchase 4.2.3 - trytond_purchase_request 4.2.2 - trytond_stock 4.2.5 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1289=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.8-38.1 proteus-4.2.1-3.1 tryton-4.2.8-19.1 trytond-4.2.7-21.1 trytond_account-4.2.4-9.1 trytond_company-4.2.2-6.1 trytond_product-4.2.2-3.1 trytond_purchase-4.2.3-6.1 trytond_purchase_request-4.2.2-3.1 trytond_stock-4.2.5-9.1 References: https://bugzilla.suse.com/1068325

1 0

openSUSE-RU-2017:3037-1: Recommended update for kcoreaddons, plasma5-pk-updates
by maintenance＠opensuse.org 21 Nov '17

21 Nov '17

openSUSE Recommended Update: Recommended update for kcoreaddons, plasma5-pk-updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3037-1 Rating: low References: #1053543 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kcoreaddons, plasma5-pk-updates fixes the following issues: - Some german translation were missing (boo#1053543) plama5-pk-updates was updated to version 0.3.1 which incorporates all previously patched fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1286=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): kcoreaddons-lang-5.32.0-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): kcoreaddons-5.32.0-5.1 kcoreaddons-debugsource-5.32.0-5.1 kcoreaddons-devel-5.32.0-5.1 kcoreaddons-devel-debuginfo-5.32.0-5.1 libKF5CoreAddons5-5.32.0-5.1 libKF5CoreAddons5-debuginfo-5.32.0-5.1 References: https://bugzilla.suse.com/1053543

1 0

openSUSE-FU-2017:3036-1: Add sitecopy to the SUSE PackageHub
by maintenance＠opensuse.org 21 Nov '17

21 Nov '17

openSUSE Feature Update: Add sitecopy to the SUSE PackageHub ______________________________________________________________________________ Announcement ID: openSUSE-FU-2017:3036-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds sitecopy to the SUSE PackageHub. Sitecopy is a local to remote website synchronizer. Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1287=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sitecopy-0.16.6-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): sitecopy-lang-0.16.6-2.1 References:

1 0

openSUSE-RU-2017:3035-1: Recommended update for kcoreaddons, plasma5-pk-updates
by maintenance＠opensuse.org 21 Nov '17

21 Nov '17

openSUSE Recommended Update: Recommended update for kcoreaddons, plasma5-pk-updates ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3035-1 Rating: low References: #1053543 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kcoreaddons, plasma5-pk-updates fixes the following issues: - Some german translation were missing (boo#1053543) plama5-pk-updates was updated to version 0.3.1 which incorporates all previously patched fixes. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1286=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): kcoreaddons-5.32.0-3.1 kcoreaddons-debugsource-5.32.0-3.1 kcoreaddons-devel-5.32.0-3.1 kcoreaddons-devel-debuginfo-5.32.0-3.1 libKF5CoreAddons5-5.32.0-3.1 libKF5CoreAddons5-debuginfo-5.32.0-3.1 plasma5-pk-updates-0.3.1-14.1 plasma5-pk-updates-debuginfo-0.3.1-14.1 plasma5-pk-updates-debugsource-0.3.1-14.1 - openSUSE Leap 42.3 (x86_64): kcoreaddons-devel-32bit-5.32.0-3.1 kcoreaddons-devel-debuginfo-32bit-5.32.0-3.1 libKF5CoreAddons5-32bit-5.32.0-3.1 libKF5CoreAddons5-debuginfo-32bit-5.32.0-3.1 - openSUSE Leap 42.3 (noarch): kcoreaddons-lang-5.32.0-3.1 plasma5-pk-updates-lang-0.3.1-14.1 References: https://bugzilla.suse.com/1053543

1 0

openSUSE-RU-2017:3034-1: moderate: Recommended update for dbus-1
by maintenance＠opensuse.org 17 Nov '17

17 Nov '17

openSUSE Recommended Update: Recommended update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:3034-1 Rating: moderate References: #1043615 #1046173 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for dbus-1 fixes the following issues: - Fix systemd-logind dbus disconnection by ensuring all required timeouts are restarted. (bsc#1043615) - Remove call to initscripts related macros from the spec file as dbus-1 does not ship any initscript anymore. (bsc#1046173) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1281=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dbus-1-1.8.22-7.1 dbus-1-debuginfo-1.8.22-7.1 dbus-1-debugsource-1.8.22-7.1 dbus-1-devel-1.8.22-7.1 dbus-1-x11-1.8.22-7.1 dbus-1-x11-debuginfo-1.8.22-7.1 dbus-1-x11-debugsource-1.8.22-7.1 libdbus-1-3-1.8.22-7.1 libdbus-1-3-debuginfo-1.8.22-7.1 - openSUSE Leap 42.2 (x86_64): dbus-1-debuginfo-32bit-1.8.22-7.1 dbus-1-devel-32bit-1.8.22-7.1 libdbus-1-3-32bit-1.8.22-7.1 libdbus-1-3-debuginfo-32bit-1.8.22-7.1 - openSUSE Leap 42.2 (noarch): dbus-1-devel-doc-1.8.22-7.1 References: https://bugzilla.suse.com/1043615 https://bugzilla.suse.com/1046173

1 0