June 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:1682-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1682-1 Rating: moderate References: #1033718 #1039360 #1042991 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for util-linux fixes the following lspci(1) issues: - Reading /dev/mem on aarch64 systems could lead to a kernel crash. (bsc#1033718) - Failure to detect PowerVM hypervisor. (bsc#1042991, bsc#1039360) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-740=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libblkid-devel-2.28-12.6.1 libblkid-devel-static-2.28-12.6.1 libblkid1-2.28-12.6.1 libblkid1-debuginfo-2.28-12.6.1 libfdisk-devel-2.28-12.6.1 libfdisk-devel-static-2.28-12.6.1 libfdisk1-2.28-12.6.1 libfdisk1-debuginfo-2.28-12.6.1 libmount-devel-2.28-12.6.1 libmount-devel-static-2.28-12.6.1 libmount1-2.28-12.6.1 libmount1-debuginfo-2.28-12.6.1 libsmartcols-devel-2.28-12.6.1 libsmartcols-devel-static-2.28-12.6.1 libsmartcols1-2.28-12.6.1 libsmartcols1-debuginfo-2.28-12.6.1 libuuid-devel-2.28-12.6.1 libuuid-devel-static-2.28-12.6.1 libuuid1-2.28-12.6.1 libuuid1-debuginfo-2.28-12.6.1 python-libmount-2.28-12.6.1 python-libmount-debuginfo-2.28-12.6.1 python-libmount-debugsource-2.28-12.6.1 util-linux-2.28-12.6.1 util-linux-debuginfo-2.28-12.6.1 util-linux-debugsource-2.28-12.6.1 util-linux-systemd-2.28-12.6.1 util-linux-systemd-debuginfo-2.28-12.6.1 util-linux-systemd-debugsource-2.28-12.6.1 uuidd-2.28-12.6.1 uuidd-debuginfo-2.28-12.6.1 - openSUSE Leap 42.2 (noarch): util-linux-lang-2.28-12.6.1 - openSUSE Leap 42.2 (x86_64): libblkid-devel-32bit-2.28-12.6.1 libblkid1-32bit-2.28-12.6.1 libblkid1-debuginfo-32bit-2.28-12.6.1 libmount-devel-32bit-2.28-12.6.1 libmount1-32bit-2.28-12.6.1 libmount1-debuginfo-32bit-2.28-12.6.1 libuuid-devel-32bit-2.28-12.6.1 libuuid1-32bit-2.28-12.6.1 libuuid1-debuginfo-32bit-2.28-12.6.1 References: https://bugzilla.suse.com/1033718 https://bugzilla.suse.com/1039360 https://bugzilla.suse.com/1042991

1 0

openSUSE-RU-2017:1681-1: moderate: Recommended update for libksieve
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for libksieve ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1681-1 Rating: moderate References: #1041850 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libksieve fixes the following issues: - Kmail may have crashed if sieve support was enabled (boo#1041850, kde#363723) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-737=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): libksieve-16.08.2-5.1 libksieve-devel-16.08.2-5.1 References: https://bugzilla.suse.com/1041850

1 0

openSUSE-SU-2017:1680-1: important: Security update for openvpn
by opensuse-security＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Security Update: Security update for openvpn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1680-1 Rating: important References: #1044947 Cross-References: CVE-2017-7508 CVE-2017-7520 CVE-2017-7521 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for openvpn fixes the following issues: - Some parts of the certificate-parsing code did not always clear all allocated memory. This would have allowed clients to leak a few bytes of memory for each connection attempt, thereby facilitating a (quite inefficient) DoS attack on the server. [bsc#1044947, CVE-2017-7521] - The ASN1 parsing code contained a bug that could have resulted in some buffers being free()d twice, and this issue could have potentially been triggered remotely by a VPN peer. [bsc#1044947, CVE-2017-7521] - If clients used a HTTP proxy with NTLM authentication, a man-in-the-middle attacker between client and proxy could cause the client to crash or disclose at most 96 bytes of stack memory. The disclosed stack memory was likely to contain the proxy password. If the proxy password had not been reused, this was unlikely to compromise the security of the OpenVPN tunnel itself. Clients who did not use the --http-proxy option with ntlm2 authentication were not affected. [bsc#1044947, CVE-2017-7520] - It was possible to trigger an assertion by sending a malformed IPv6 packet. That issue could have been abused to remotely shutdown an openvpn server or client, if IPv6 and --mssfix were enabled and if the IPv6 networks used inside the VPN were known. [bsc#1044947, CVE-2017-7508] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-730=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): openvpn-2.3.8-8.10.1 openvpn-auth-pam-plugin-2.3.8-8.10.1 openvpn-auth-pam-plugin-debuginfo-2.3.8-8.10.1 openvpn-debuginfo-2.3.8-8.10.1 openvpn-debugsource-2.3.8-8.10.1 openvpn-devel-2.3.8-8.10.1 openvpn-down-root-plugin-2.3.8-8.10.1 openvpn-down-root-plugin-debuginfo-2.3.8-8.10.1 References: https://www.suse.com/security/cve/CVE-2017-7508.html https://www.suse.com/security/cve/CVE-2017-7520.html https://www.suse.com/security/cve/CVE-2017-7521.html https://bugzilla.suse.com/1044947

1 0

openSUSE-SU-2017:1679-1: moderate: Security update for libqt5-qtbase, libqt5-qtdeclarative
by opensuse-security＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Security Update: Security update for libqt5-qtbase, libqt5-qtdeclarative ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1679-1 Rating: moderate References: #1013095 #1034005 #1034402 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libqt5-qtbase and libqt5-qtdeclarative fixes the following issues: This security issue was fixed: - Prevent potential information leak due to race condition in QSaveFile (bsc#1034005). These non-security issues were fixed: - Fixed crash in QPlainTextEdit - Fixed Burmese rendering issue - Fixed reuse of C++-owned QObjects by different QML engines that could lead to crashes in kwin (bsc#1034402) - Make libqt5-qtquickcontrols available in SUSE Linux Enterprise. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-731=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libQt5Bootstrap-devel-static-5.6.1-3.3.1 libQt5Concurrent-devel-5.6.1-3.3.1 libQt5Concurrent5-5.6.1-3.3.1 libQt5Concurrent5-debuginfo-5.6.1-3.3.1 libQt5Core-devel-5.6.1-3.3.1 libQt5Core5-5.6.1-3.3.1 libQt5Core5-debuginfo-5.6.1-3.3.1 libQt5DBus-devel-5.6.1-3.3.1 libQt5DBus-devel-debuginfo-5.6.1-3.3.1 libQt5DBus5-5.6.1-3.3.1 libQt5DBus5-debuginfo-5.6.1-3.3.1 libQt5Gui-devel-5.6.1-3.3.1 libQt5Gui5-5.6.1-3.3.1 libQt5Gui5-debuginfo-5.6.1-3.3.1 libQt5Network-devel-5.6.1-3.3.1 libQt5Network5-5.6.1-3.3.1 libQt5Network5-debuginfo-5.6.1-3.3.1 libQt5OpenGL-devel-5.6.1-3.3.1 libQt5OpenGL5-5.6.1-3.3.1 libQt5OpenGL5-debuginfo-5.6.1-3.3.1 libQt5OpenGLExtensions-devel-static-5.6.1-3.3.1 libQt5PlatformHeaders-devel-5.6.1-3.3.1 libQt5PlatformSupport-devel-static-5.6.1-3.3.1 libQt5PrintSupport-devel-5.6.1-3.3.1 libQt5PrintSupport5-5.6.1-3.3.1 libQt5PrintSupport5-debuginfo-5.6.1-3.3.1 libQt5Sql-devel-5.6.1-3.3.1 libQt5Sql5-5.6.1-3.3.1 libQt5Sql5-debuginfo-5.6.1-3.3.1 libQt5Sql5-mysql-5.6.1-3.3.1 libQt5Sql5-mysql-debuginfo-5.6.1-3.3.1 libQt5Sql5-postgresql-5.6.1-3.3.1 libQt5Sql5-postgresql-debuginfo-5.6.1-3.3.1 libQt5Sql5-sqlite-5.6.1-3.3.1 libQt5Sql5-sqlite-debuginfo-5.6.1-3.3.1 libQt5Sql5-unixODBC-5.6.1-3.3.1 libQt5Sql5-unixODBC-debuginfo-5.6.1-3.3.1 libQt5Test-devel-5.6.1-3.3.1 libQt5Test5-5.6.1-3.3.1 libQt5Test5-debuginfo-5.6.1-3.3.1 libQt5Widgets-devel-5.6.1-3.3.1 libQt5Widgets5-5.6.1-3.3.1 libQt5Widgets5-debuginfo-5.6.1-3.3.1 libQt5Xml-devel-5.6.1-3.3.1 libQt5Xml5-5.6.1-3.3.1 libQt5Xml5-debuginfo-5.6.1-3.3.1 libQtQuick5-5.6.1-7.3.1 libQtQuick5-debuginfo-5.6.1-7.3.1 libqt5-qtbase-common-devel-5.6.1-3.3.1 libqt5-qtbase-common-devel-debuginfo-5.6.1-3.3.1 libqt5-qtbase-debugsource-5.6.1-3.3.1 libqt5-qtbase-devel-5.6.1-3.3.1 libqt5-qtbase-examples-5.6.1-3.3.1 libqt5-qtbase-examples-debuginfo-5.6.1-3.3.1 libqt5-qtdeclarative-debugsource-5.6.1-7.3.1 libqt5-qtdeclarative-devel-5.6.1-7.3.1 libqt5-qtdeclarative-devel-debuginfo-5.6.1-7.3.1 libqt5-qtdeclarative-examples-5.6.1-7.3.1 libqt5-qtdeclarative-examples-debuginfo-5.6.1-7.3.1 libqt5-qtdeclarative-tools-5.6.1-7.3.1 libqt5-qtdeclarative-tools-debuginfo-5.6.1-7.3.1 - openSUSE Leap 42.2 (noarch): libQt5Core-private-headers-devel-5.6.1-3.3.1 libQt5DBus-private-headers-devel-5.6.1-3.3.1 libQt5Gui-private-headers-devel-5.6.1-3.3.1 libQt5Network-private-headers-devel-5.6.1-3.3.1 libQt5OpenGL-private-headers-devel-5.6.1-3.3.1 libQt5PlatformSupport-private-headers-devel-5.6.1-3.3.1 libQt5PrintSupport-private-headers-devel-5.6.1-3.3.1 libQt5Sql-private-headers-devel-5.6.1-3.3.1 libQt5Test-private-headers-devel-5.6.1-3.3.1 libQt5Widgets-private-headers-devel-5.6.1-3.3.1 libqt5-qtbase-private-headers-devel-5.6.1-3.3.1 libqt5-qtdeclarative-private-headers-devel-5.6.1-7.3.1 - openSUSE Leap 42.2 (x86_64): libQt5Bootstrap-devel-static-32bit-5.6.1-3.3.1 libQt5Concurrent-devel-32bit-5.6.1-3.3.1 libQt5Concurrent5-32bit-5.6.1-3.3.1 libQt5Concurrent5-debuginfo-32bit-5.6.1-3.3.1 libQt5Core-devel-32bit-5.6.1-3.3.1 libQt5Core5-32bit-5.6.1-3.3.1 libQt5Core5-debuginfo-32bit-5.6.1-3.3.1 libQt5DBus-devel-32bit-5.6.1-3.3.1 libQt5DBus-devel-debuginfo-32bit-5.6.1-3.3.1 libQt5DBus5-32bit-5.6.1-3.3.1 libQt5DBus5-debuginfo-32bit-5.6.1-3.3.1 libQt5Gui-devel-32bit-5.6.1-3.3.1 libQt5Gui5-32bit-5.6.1-3.3.1 libQt5Gui5-debuginfo-32bit-5.6.1-3.3.1 libQt5Network-devel-32bit-5.6.1-3.3.1 libQt5Network5-32bit-5.6.1-3.3.1 libQt5Network5-debuginfo-32bit-5.6.1-3.3.1 libQt5OpenGL-devel-32bit-5.6.1-3.3.1 libQt5OpenGL5-32bit-5.6.1-3.3.1 libQt5OpenGL5-debuginfo-32bit-5.6.1-3.3.1 libQt5OpenGLExtensions-devel-static-32bit-5.6.1-3.3.1 libQt5PlatformSupport-devel-static-32bit-5.6.1-3.3.1 libQt5PrintSupport-devel-32bit-5.6.1-3.3.1 libQt5PrintSupport5-32bit-5.6.1-3.3.1 libQt5PrintSupport5-debuginfo-32bit-5.6.1-3.3.1 libQt5Sql-devel-32bit-5.6.1-3.3.1 libQt5Sql5-32bit-5.6.1-3.3.1 libQt5Sql5-debuginfo-32bit-5.6.1-3.3.1 libQt5Sql5-mysql-32bit-5.6.1-3.3.1 libQt5Sql5-mysql-debuginfo-32bit-5.6.1-3.3.1 libQt5Sql5-postgresql-32bit-5.6.1-3.3.1 libQt5Sql5-postgresql-debuginfo-32bit-5.6.1-3.3.1 libQt5Sql5-sqlite-32bit-5.6.1-3.3.1 libQt5Sql5-sqlite-debuginfo-32bit-5.6.1-3.3.1 libQt5Sql5-unixODBC-32bit-5.6.1-3.3.1 libQt5Sql5-unixODBC-debuginfo-32bit-5.6.1-3.3.1 libQt5Test-devel-32bit-5.6.1-3.3.1 libQt5Test5-32bit-5.6.1-3.3.1 libQt5Test5-debuginfo-32bit-5.6.1-3.3.1 libQt5Widgets-devel-32bit-5.6.1-3.3.1 libQt5Widgets5-32bit-5.6.1-3.3.1 libQt5Widgets5-debuginfo-32bit-5.6.1-3.3.1 libQt5Xml-devel-32bit-5.6.1-3.3.1 libQt5Xml5-32bit-5.6.1-3.3.1 libQt5Xml5-debuginfo-32bit-5.6.1-3.3.1 libQtQuick5-32bit-5.6.1-7.3.1 libQtQuick5-debuginfo-32bit-5.6.1-7.3.1 libqt5-qtbase-examples-32bit-5.6.1-3.3.1 libqt5-qtbase-examples-debuginfo-32bit-5.6.1-3.3.1 libqt5-qtdeclarative-devel-32bit-5.6.1-7.3.1 libqt5-qtdeclarative-devel-debuginfo-32bit-5.6.1-7.3.1 References: https://bugzilla.suse.com/1013095 https://bugzilla.suse.com/1034005 https://bugzilla.suse.com/1034402

1 0

openSUSE-RU-2017:1678-1: Recommended update for astyle
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for astyle ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1678-1 Rating: low References: #1044030 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides astyle 3.0.1 and various improvements and bug fixes: - Add new option "indent-after-parens". - Add new option "attach-closing-while". - Fix crash caused by certain class initializer formats. - Fix memory leak when using "indent-preproc-define". - Fix boundary conditions discovered by american fuzzy lop fuzzer. - Please see the included notes.html and news.html for a list of all changes in this release. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-727=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): astyle-3.0.1-5.7.1 astyle-debuginfo-3.0.1-5.7.1 astyle-debugsource-3.0.1-5.7.1 References: https://bugzilla.suse.com/1044030

1 0

openSUSE-RU-2017:1677-1: Recommended update for dump
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for dump ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1677-1 Rating: low References: #1034032 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dump fixes handling of files with leading zeros. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-736=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dump-0.4b43-19.3.1 dump-debuginfo-0.4b43-19.3.1 dump-debugsource-0.4b43-19.3.1 References: https://bugzilla.suse.com/1034032

1 0

openSUSE-SU-2017:1676-1: moderate: Security update for libmicrohttpd
by opensuse-security＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Security Update: Security update for libmicrohttpd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1676-1 Rating: moderate References: #1041216 #854443 Cross-References: CVE-2013-7038 CVE-2013-7039 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for libmicrohttpd fixes the following issues: - CVE-2013-7038: The MHD_http_unescape function in libmicrohttpd might have allowed remote attackers to obtain sensitive information or cause a denial of service (crash) via unspecified vectors that trigger an out-of-bounds read. (bsc#854443) - CVE-2013-7039: Stack-based buffer overflow in the MHD_digest_auth_check function in libmicrohttpd, when MHD_OPTION_CONNECTION_MEMORY_LIMIT is set to a large value, allowed remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long URI in an authentication header. (bsc#854443) - Fixed various bugs found during a 2017 audit, which are more hardening measures and not security issues. (bsc#1041216) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-728=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libmicrohttpd-debugsource-0.9.30-5.3.1 libmicrohttpd-devel-0.9.30-5.3.1 libmicrohttpd10-0.9.30-5.3.1 libmicrohttpd10-debuginfo-0.9.30-5.3.1 libmicrospdy-devel-0.9.30-5.3.1 libmicrospdy0-0.9.30-5.3.1 libmicrospdy0-debuginfo-0.9.30-5.3.1 microspdy2http-0.9.30-5.3.1 microspdy2http-debuginfo-0.9.30-5.3.1 References: https://www.suse.com/security/cve/CVE-2013-7038.html https://www.suse.com/security/cve/CVE-2013-7039.html https://bugzilla.suse.com/1041216 https://bugzilla.suse.com/854443

1 0

openSUSE-RU-2017:1674-1: Recommended update for ocaml-gettext
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for ocaml-gettext ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1674-1 Rating: low References: #1031359 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ocaml-gettext fixes a dependency error in the stub-devel sub-package. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-739=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): ocaml-gettext-0.3.5-4.3.1 ocaml-gettext-camomile-0.3.5-4.3.1 ocaml-gettext-camomile-devel-0.3.5-4.3.1 ocaml-gettext-debuginfo-0.3.5-4.3.1 ocaml-gettext-debugsource-0.3.5-4.3.1 ocaml-gettext-devel-0.3.5-4.3.1 ocaml-gettext-stub-0.3.5-4.3.1 ocaml-gettext-stub-debuginfo-0.3.5-4.3.1 ocaml-gettext-stub-devel-0.3.5-4.3.1 References: https://bugzilla.suse.com/1031359

1 0

openSUSE-RU-2017:1673-1: moderate: Recommended update for links
by maintenance＠opensuse.org 26 Jun '17

26 Jun '17

openSUSE Recommended Update: Recommended update for links ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1673-1 Rating: moderate References: #1022468 #1022469 #946065 #992495 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for links fixes the following security and non-security issues: Links was updated to version 2.14: * Limit keepalive of ciphers with 64-bit block size to mitigate the SWEET32 attack boo#1022469 * Report home directory in the "Version" window * Improved tor hardening * Use keys 'P' and 'L' to scroll up and down * Fix a memory leak when copying the current url to clipboard * Fix crash when the user pressed Ctrl-G on a form field * Workaround for a bug in librsvg that makes mathematics on Wikipedia unreadable * Support fourth and fifth mouse button in gpm and framebuffer * Fixed bugs when downgrading SSL connection while https proxy or socks proxy is used * Security bug fixed: Do not load or render the content of "407 Proxy Authentication Required" reply when using https proxy. This avoids the FalseCONNECT attack. boo#1022468 Also, don't allow 401 and 407 responses to set cookies. * Pop openssl error stack on every error - make sure that SSL errors on one connection do not affect other connections * Never select directfb driver automatically unless started with the '-driver directfb' option previously patched: * Disable SSL compression to avoid the CRIME attack boo#1022469 drop links-nosslcomp.patch Links was updated to version 2.13: * Page up and page down scroll slightly less than a page * Use domain list from publicsuffix.org to prevent setting cookies on public domains. * Fix bug that allowed bla.com to register cookie for la.com or a.com * Fixed a bug in the X driver that characters with unicode codes 128-255 could not be entered with some locales * Security bug fixed: Use separate unix domain socket for anonymous instances, so that the anonymous instance won't connect to non-anonymous one [boo#992495] * <samp> element * In case of certification verification failure, don't pop up multiple dialog windows asking for the same server * Do not lookup .onion addresses directly, as specified by rfc7686 * Updated Polish Translation * Security enhancement: Warn if the SSL/TLS method was downgraded Links was updated to version 2.12: * Verify ssl certificates boo#946065 * Warn if server uses SSL2 or SSL3 protocol * Support SSL client certificates Links was updated to version 2.10: * SVG support using the rsvg library * Attach to existing links instance instead of creating a new instance * Detect image type based on the first few bytes rather than on content-type * Use OpenMP in the image scaler * Preallocate downloaded files on Linux * Support libevent and libev * SSL SNI now enabled upstream * Support keepalive on https connections Links was updated to 2.9: * Work around some screen-corruption bugs in the OpenVMS terminal driver * Support mouse wheel in framebuffer (unfortunatelly we can't support it in text mode because when we instruct gpm to send us the wheel event, gpm stops drawing the cursor when the mouse is moved). * Print "^" and "_" for <sub> and <sup> tags in text mode * An option to fake Firefox in the HTTP header. It modifies User-Agent and several other options to be more Firefox-like. This option is also automatically turned on when "Connect only via proxies or Socks (useful for tor)" is selected. It makes it safer to use Links with tor. * Fixed quadratic complexity in the text renderer when exteremely long lines were used * Do not print the character 0x9b if the display character set doesn't have it, because it is interpreted as a control character on the Linux console * An option to break long lines in <pre> sections * Consume less memory when 8-bit gamma correction is used * Updated the list of top level domains * Use malloc_trim to return unused memory to the system * Support RFC5987 for filenames * Support StaticColor in the X-window driver * Fix crash on OS/2 if image is wider than 10921 pixels * Use clock_gettime if available * The ability to set screen margins for text mode and framebuffer * Fix palette corruption on framebuffer when links instance was terminated while it was not active * Improve the gif decoder to accept more images * Increase the amount of data read from the socket, it improves speed when loading big images * Accept "text/xml" as html type Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-732=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): links-2.14-5.3.1 links-debuginfo-2.14-5.3.1 links-debugsource-2.14-5.3.1 References: https://bugzilla.suse.com/1022468 https://bugzilla.suse.com/1022469 https://bugzilla.suse.com/946065 https://bugzilla.suse.com/992495

1 0

openSUSE-RU-2017:1668-1: Recommended update for Opera
by maintenance＠opensuse.org 24 Jun '17

24 Jun '17

openSUSE Recommended Update: Recommended update for Opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:1668-1 Rating: low References: Affected Products: openSUSE Leap 42.2:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update provides Opera 46.0.2597.26. For details see https://blogs.opera.com/desktop/changelog-for-46/#b2597.26 The following packaging changes are included: - Switch to unpacking RPM. - Recommend flash-player-ppapi instead of chromium-pepper-flash. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-725=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-46.0.2597.26-47.1 References:

1 0