August 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:2277-1: Recommended update for kopano
by maintenance＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Recommended Update: Recommended update for kopano ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2277-1 Rating: low References: #1053909 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides a new version of kopano and libs3 fixes the following issues: - kopano 8.3.3.24 * server: Disallow empty value for embedded_attachment_limit and depth counting error. [KC-745] * common: Fix incorrect timeout check in scheduler which had disabled softdeletes. [KC-638] * server: Disable reminders from shared stores. [KC-758] * Catch pointer underflows / NULL pointers. [KC-694, KC-60, KC-177, KC-355, KC-378, KC-379, KC-669, KC-754] * libserver: Avoid creating multi-stream gzip files. [KC-104, KC-304, KC-597 - libs3 4.1.git257 * Adapted v4 signature construction for Linux. * Add auth. region to relevant API calls. * Support the generate_query_string operation with the new authorization/signature logic. * Fix query parameter handling in canonicalization. * Remove obsolete hash functions, update library major version due to API change. * Fix expected output for ACL with new identifier format. * Increase length of auth. header to account for requests with many amz headers. * Fix the logic that determines the hostname to use in HTTP headers. * fix S3_destroy_request_context() to correctly abort curl_multi context. * Request timeout for _create_bucket and _put_object. * Request timeout for _get_object and _head_object. * timeout: report timeout error if request timed out. * Fix signature error when requesting with sub resource. * Fix urlencode error according to AWS S3 documents. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-975=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libs3-4-4.1.git257-5.1 libs3-4-debuginfo-4.1.git257-5.1 libs3-debugsource-4.1.git257-5.1 libs3-devel-4.1.git257-5.1 libs3-tools-4.1.git257-5.1 libs3-tools-debuginfo-4.1.git257-5.1 - openSUSE Leap 42.3 (noarch): kopano-bash-completion-8.3.3.24-3.2 kopano-migration-imap-8.3.3.24-3.2 - openSUSE Leap 42.3 (x86_64): kopano-archiver-8.3.3.24-3.2 kopano-archiver-debuginfo-8.3.3.24-3.2 kopano-backup-8.3.3.24-3.2 kopano-client-8.3.3.24-3.2 kopano-client-debuginfo-8.3.3.24-3.2 kopano-common-8.3.3.24-3.2 kopano-compat-8.3.3.24-3.2 kopano-contacts-8.3.3.24-3.2 kopano-contacts-debuginfo-8.3.3.24-3.2 kopano-dagent-8.3.3.24-3.2 kopano-dagent-debuginfo-8.3.3.24-3.2 kopano-debugsource-8.3.3.24-3.2 kopano-devel-8.3.3.24-3.2 kopano-gateway-8.3.3.24-3.2 kopano-gateway-debuginfo-8.3.3.24-3.2 kopano-ical-8.3.3.24-3.2 kopano-ical-debuginfo-8.3.3.24-3.2 kopano-lang-8.3.3.24-3.2 kopano-migration-pst-8.3.3.24-3.2 kopano-monitor-8.3.3.24-3.2 kopano-monitor-debuginfo-8.3.3.24-3.2 kopano-presence-8.3.3.24-3.2 kopano-search-8.3.3.24-3.2 kopano-server-8.3.3.24-3.2 kopano-server-debuginfo-8.3.3.24-3.2 kopano-server-packages-8.3.3.24-3.2 kopano-spooler-8.3.3.24-3.2 kopano-spooler-debuginfo-8.3.3.24-3.2 kopano-utils-8.3.3.24-3.2 kopano-utils-debuginfo-8.3.3.24-3.2 libkcarchiver0-8.3.3.24-3.2 libkcarchiver0-debuginfo-8.3.3.24-3.2 libkcarchivercore0-8.3.3.24-3.2 libkcarchivercore0-debuginfo-8.3.3.24-3.2 libkcfreebusy0-8.3.3.24-3.2 libkcfreebusy0-debuginfo-8.3.3.24-3.2 libkchl0-8.3.3.24-3.2 libkchl0-debuginfo-8.3.3.24-3.2 libkcicalmapi0-8.3.3.24-3.2 libkcicalmapi0-debuginfo-8.3.3.24-3.2 libkcinetmapi0-8.3.3.24-3.2 libkcinetmapi0-debuginfo-8.3.3.24-3.2 libkcmapi0-8.3.3.24-3.2 libkcmapi0-debuginfo-8.3.3.24-3.2 libkcserver0-8.3.3.24-3.2 libkcserver0-debuginfo-8.3.3.24-3.2 libkcsoap0-8.3.3.24-3.2 libkcsoap0-debuginfo-8.3.3.24-3.2 libkcssl0-8.3.3.24-3.2 libkcssl0-debuginfo-8.3.3.24-3.2 libkcsync0-8.3.3.24-3.2 libkcsync0-debuginfo-8.3.3.24-3.2 libkcutil0-8.3.3.24-3.2 libkcutil0-debuginfo-8.3.3.24-3.2 libmapi1-8.3.3.24-3.2 libmapi1-debuginfo-8.3.3.24-3.2 php-mapi-8.3.3.24-3.2 php-mapi-debuginfo-8.3.3.24-3.2 python-kopano-8.3.3.24-3.2 python-mapi-8.3.3.24-3.2 python-mapi-debuginfo-8.3.3.24-3.2 References: https://bugzilla.suse.com/1053909

1 0

openSUSE-RU-2017:2276-1: Recommended update for tryton, trytond, gnuhealth
by maintenance＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Recommended Update: Recommended update for tryton, trytond, gnuhealth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2276-1 Rating: low References: #1054032 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tryton, trytond and gnuhealth fixes the following issues: gnuhealth: - Add gnuhealth-webdav@.service tryton, trydond, tryton_account, tryton_stock - typo in trytond.conf removed - various small bug fixes in the Tryton 4.2 series (boo#1054032) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-976=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): gnuhealth-3.2.1-18.1 tryton-4.2.6-13.1 trytond-4.2.6-15.1 trytond_account-4.2.2-3.1 trytond_stock-4.2.3-3.1 References: https://bugzilla.suse.com/1054032

1 0

openSUSE-RU-2017:2275-1: Recommended update for lua51
by maintenance＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Recommended Update: Recommended update for lua51 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2275-1 Rating: low References: #1051626 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lua51 provides the following fixes: - Add Lua(API) and Lua(devel) symbols to fix building of lua51-luasocket. (bsc#1051626) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-978=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-978=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): liblua5_1-5.1.5-16.1 liblua5_1-debuginfo-5.1.5-16.1 lua51-5.1.5-16.1 lua51-debuginfo-5.1.5-16.1 lua51-debugsource-5.1.5-16.1 lua51-devel-5.1.5-16.1 - openSUSE Leap 42.3 (x86_64): liblua5_1-32bit-5.1.5-16.1 liblua5_1-debuginfo-32bit-5.1.5-16.1 - openSUSE Leap 42.3 (noarch): lua51-doc-5.1.5-16.1 - openSUSE Leap 42.2 (i586 x86_64): liblua5_1-5.1.5-13.3.1 liblua5_1-debuginfo-5.1.5-13.3.1 lua51-5.1.5-13.3.1 lua51-debuginfo-5.1.5-13.3.1 lua51-debugsource-5.1.5-13.3.1 lua51-devel-5.1.5-13.3.1 - openSUSE Leap 42.2 (x86_64): liblua5_1-32bit-5.1.5-13.3.1 liblua5_1-debuginfo-32bit-5.1.5-13.3.1 - openSUSE Leap 42.2 (noarch): lua51-doc-5.1.5-13.3.1 References: https://bugzilla.suse.com/1051626

1 0

openSUSE-SU-2017:2273-1: Security update for gnome-shell
by opensuse-security＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Security Update: Security update for gnome-shell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2273-1 Rating: low References: #1008539 #1034584 #1034827 #1036494 #1047262 Cross-References: CVE-2017-8288 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for gnome-shell provides the following fixes: - Fix not intuitive login screen for root user (bsc#1047262) - Disable session selection button when it's hidden in user switch dialog (bsc#1034584, bsc#1034827) - Fix app windows overlay app list in overview screen (bsc#1008539) - Properly handle failures when loading extensions (bsc#1036494, CVE-2017-8288) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-974=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-974=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): gnome-shell-3.20.4-13.1 gnome-shell-browser-plugin-3.20.4-13.1 gnome-shell-browser-plugin-debuginfo-3.20.4-13.1 gnome-shell-calendar-3.20.4-13.1 gnome-shell-calendar-debuginfo-3.20.4-13.1 gnome-shell-debuginfo-3.20.4-13.1 gnome-shell-debugsource-3.20.4-13.1 gnome-shell-devel-3.20.4-13.1 - openSUSE Leap 42.3 (noarch): gnome-shell-lang-3.20.4-13.1 - openSUSE Leap 42.2 (x86_64): gnome-shell-3.20.4-10.3.1 gnome-shell-browser-plugin-3.20.4-10.3.1 gnome-shell-browser-plugin-debuginfo-3.20.4-10.3.1 gnome-shell-calendar-3.20.4-10.3.1 gnome-shell-calendar-debuginfo-3.20.4-10.3.1 gnome-shell-debuginfo-3.20.4-10.3.1 gnome-shell-debugsource-3.20.4-10.3.1 gnome-shell-devel-3.20.4-10.3.1 - openSUSE Leap 42.2 (noarch): gnome-shell-lang-3.20.4-10.3.1 References: https://www.suse.com/security/cve/CVE-2017-8288.html https://bugzilla.suse.com/1008539 https://bugzilla.suse.com/1034584 https://bugzilla.suse.com/1034827 https://bugzilla.suse.com/1036494 https://bugzilla.suse.com/1047262

1 0

openSUSE-SU-2017:2272-1: important: Security update for openvswitch
by opensuse-security＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Security Update: Security update for openvswitch ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2272-1 Rating: important References: #1002734 #1041447 #1041470 #1050896 Cross-References: CVE-2017-9263 CVE-2017-9265 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for openvswitch fixes the following issues: - CVE-2017-9263: OpenFlow role status message can cause a call to abort() leading to application crash (bsc#1041470) - CVE-2017-9265: Buffer over-read while parsing message could lead to crash or maybe arbitrary code execution (bsc#1041447) - Do not restart the ovs-vswitchd and ovsdb-server services on package updates (bsc#1002734) - Do not restart the ovs-vswitchd, ovsdb-server and openvswitch services on package removals. This facilitates potential future package moves but also preserves connectivity when the package is removed (bsc#1050896) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-973=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): openvswitch-2.7.0-4.1 openvswitch-debuginfo-2.7.0-4.1 openvswitch-debugsource-2.7.0-4.1 openvswitch-devel-2.7.0-4.1 openvswitch-ovn-central-2.7.0-4.1 openvswitch-ovn-central-debuginfo-2.7.0-4.1 openvswitch-ovn-common-2.7.0-4.1 openvswitch-ovn-common-debuginfo-2.7.0-4.1 openvswitch-ovn-docker-2.7.0-4.1 openvswitch-ovn-host-2.7.0-4.1 openvswitch-ovn-host-debuginfo-2.7.0-4.1 openvswitch-ovn-vtep-2.7.0-4.1 openvswitch-ovn-vtep-debuginfo-2.7.0-4.1 openvswitch-pki-2.7.0-4.1 openvswitch-test-2.7.0-4.1 openvswitch-test-debuginfo-2.7.0-4.1 openvswitch-vtep-2.7.0-4.1 openvswitch-vtep-debuginfo-2.7.0-4.1 python-openvswitch-2.7.0-4.1 python-openvswitch-test-2.7.0-4.1 References: https://www.suse.com/security/cve/CVE-2017-9263.html https://www.suse.com/security/cve/CVE-2017-9265.html https://bugzilla.suse.com/1002734 https://bugzilla.suse.com/1041447 https://bugzilla.suse.com/1041470 https://bugzilla.suse.com/1050896

1 0

openSUSE-SU-2017:2271-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2271-1 Rating: important References: #1042812 #1042826 #1043289 #1049072 Cross-References: CVE-2017-11403 CVE-2017-9439 CVE-2017-9440 CVE-2017-9501 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for ImageMagick fixes the following issues: Security issues fixed: - CVE-2017-9439: A memory leak was found in the function ReadPDBImage incoders/pdb.c (bsc#1042826) - CVE-2017-9440: A memory leak was found in the function ReadPSDChannelin coders/psd.c (bsc#1042812) - CVE-2017-9501: An assertion failure could cause a denial of service via a crafted file (bsc#1043289) - CVE-2017-11403: ReadMNGImage function in coders/png.c has an out-of-order CloseBlob call, resulting in a use-after-free via acrafted file (bsc#1049072) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-971=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-971=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ImageMagick-6.8.8.1-34.1 ImageMagick-debuginfo-6.8.8.1-34.1 ImageMagick-debugsource-6.8.8.1-34.1 ImageMagick-devel-6.8.8.1-34.1 ImageMagick-extra-6.8.8.1-34.1 ImageMagick-extra-debuginfo-6.8.8.1-34.1 libMagick++-6_Q16-3-6.8.8.1-34.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-34.1 libMagick++-devel-6.8.8.1-34.1 libMagickCore-6_Q16-1-6.8.8.1-34.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-34.1 libMagickWand-6_Q16-1-6.8.8.1-34.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-34.1 perl-PerlMagick-6.8.8.1-34.1 perl-PerlMagick-debuginfo-6.8.8.1-34.1 - openSUSE Leap 42.3 (x86_64): ImageMagick-devel-32bit-6.8.8.1-34.1 libMagick++-6_Q16-3-32bit-6.8.8.1-34.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-34.1 libMagick++-devel-32bit-6.8.8.1-34.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-34.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-34.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-34.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-34.1 - openSUSE Leap 42.3 (noarch): ImageMagick-doc-6.8.8.1-34.1 - openSUSE Leap 42.2 (i586 x86_64): ImageMagick-6.8.8.1-30.6.1 ImageMagick-debuginfo-6.8.8.1-30.6.1 ImageMagick-debugsource-6.8.8.1-30.6.1 ImageMagick-devel-6.8.8.1-30.6.1 ImageMagick-extra-6.8.8.1-30.6.1 ImageMagick-extra-debuginfo-6.8.8.1-30.6.1 libMagick++-6_Q16-3-6.8.8.1-30.6.1 libMagick++-6_Q16-3-debuginfo-6.8.8.1-30.6.1 libMagick++-devel-6.8.8.1-30.6.1 libMagickCore-6_Q16-1-6.8.8.1-30.6.1 libMagickCore-6_Q16-1-debuginfo-6.8.8.1-30.6.1 libMagickWand-6_Q16-1-6.8.8.1-30.6.1 libMagickWand-6_Q16-1-debuginfo-6.8.8.1-30.6.1 perl-PerlMagick-6.8.8.1-30.6.1 perl-PerlMagick-debuginfo-6.8.8.1-30.6.1 - openSUSE Leap 42.2 (noarch): ImageMagick-doc-6.8.8.1-30.6.1 - openSUSE Leap 42.2 (x86_64): ImageMagick-devel-32bit-6.8.8.1-30.6.1 libMagick++-6_Q16-3-32bit-6.8.8.1-30.6.1 libMagick++-6_Q16-3-debuginfo-32bit-6.8.8.1-30.6.1 libMagick++-devel-32bit-6.8.8.1-30.6.1 libMagickCore-6_Q16-1-32bit-6.8.8.1-30.6.1 libMagickCore-6_Q16-1-debuginfo-32bit-6.8.8.1-30.6.1 libMagickWand-6_Q16-1-32bit-6.8.8.1-30.6.1 libMagickWand-6_Q16-1-debuginfo-32bit-6.8.8.1-30.6.1 References: https://www.suse.com/security/cve/CVE-2017-11403.html https://www.suse.com/security/cve/CVE-2017-9439.html https://www.suse.com/security/cve/CVE-2017-9440.html https://www.suse.com/security/cve/CVE-2017-9501.html https://bugzilla.suse.com/1042812 https://bugzilla.suse.com/1042826 https://bugzilla.suse.com/1043289 https://bugzilla.suse.com/1049072

1 0

openSUSE-SU-2017:2270-1: important: Security update for freeradius-server
by opensuse-security＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Security Update: Security update for freeradius-server ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2270-1 Rating: important References: #1049086 Cross-References: CVE-2017-10978 CVE-2017-10983 CVE-2017-10984 CVE-2017-10985 CVE-2017-10986 CVE-2017-10987 CVE-2017-10988 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for freeradius-server fixes the following issues: - update to 3.0.15 (bsc#1049086) * Bind the lifetime of program name and python path to the module * CVE-2017-10978: FR-GV-201: Check input / output length in make_secret() (bsc#1049086) * CVE-2017-10983: FR-GV-206: Fix read overflow when decoding DHCP option 63 (bsc#1049086) * CVE-2017-10984: FR-GV-301: Fix write overflow in data2vp_wimax() (bsc#1049086) * CVE-2017-10985: FR-GV-302: Fix infinite loop and memory exhaustion with 'concat' attributes (bsc#1049086) * CVE-2017-10986: FR-GV-303: Fix infinite read in dhcp_attr2vp() (bsc#1049086) * CVE-2017-10987: FR-GV-304: Fix buffer over-read in fr_dhcp_decode_suboptions() (bsc#1049086) * CVE-2017-10988: FR-GV-305: Decode 'signed' attributes correctly. (bsc#1049086) * FR-AD-001: use strncmp() instead of memcmp() for bounded data * Print messages when we see deprecated configuration items * Show reasons why we couldn't parse a certificate expiry time * Be more accepting about truncated ASN1 times. * Fix OpenSSL API issue which could leak small amounts of memory. * For Access-Reject, call rad_authlog() after running the post-auth section, just like for Access-Accept. * Don't crash when reading corrupted data from session resumption cache. * Parse port in dhcpclient. * Don't leak memory for OpenSSL. * Portability fixes taken from OpenBSD port collection. * run rad_authlog after post-auth for Access-Reject. * Don't process VMPS packets twice. * Fix attribute truncation in rlm_perl * Fix bug when processing huntgroups. * FR-AD-002 - Bind the lifetime of program name and python path to the module * FR-AD-003 - Pass correct statement length into sqlite3_prepare[_v2] This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-972=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): freeradius-server-3.0.15-3.1 freeradius-server-debuginfo-3.0.15-3.1 freeradius-server-debugsource-3.0.15-3.1 freeradius-server-devel-3.0.15-3.1 freeradius-server-doc-3.0.15-3.1 freeradius-server-krb5-3.0.15-3.1 freeradius-server-krb5-debuginfo-3.0.15-3.1 freeradius-server-ldap-3.0.15-3.1 freeradius-server-ldap-debuginfo-3.0.15-3.1 freeradius-server-libs-3.0.15-3.1 freeradius-server-libs-debuginfo-3.0.15-3.1 freeradius-server-mysql-3.0.15-3.1 freeradius-server-mysql-debuginfo-3.0.15-3.1 freeradius-server-perl-3.0.15-3.1 freeradius-server-perl-debuginfo-3.0.15-3.1 freeradius-server-postgresql-3.0.15-3.1 freeradius-server-postgresql-debuginfo-3.0.15-3.1 freeradius-server-python-3.0.15-3.1 freeradius-server-python-debuginfo-3.0.15-3.1 freeradius-server-sqlite-3.0.15-3.1 freeradius-server-sqlite-debuginfo-3.0.15-3.1 freeradius-server-utils-3.0.15-3.1 freeradius-server-utils-debuginfo-3.0.15-3.1 References: https://www.suse.com/security/cve/CVE-2017-10978.html https://www.suse.com/security/cve/CVE-2017-10983.html https://www.suse.com/security/cve/CVE-2017-10984.html https://www.suse.com/security/cve/CVE-2017-10985.html https://www.suse.com/security/cve/CVE-2017-10986.html https://www.suse.com/security/cve/CVE-2017-10987.html https://www.suse.com/security/cve/CVE-2017-10988.html https://bugzilla.suse.com/1049086

1 0

openSUSE-RU-2017:2269-1: Recommended update for google-cloud-sdk
by maintenance＠opensuse.org 26 Aug '17

26 Aug '17

openSUSE Recommended Update: Recommended update for google-cloud-sdk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2269-1 Rating: low References: #1002895 #1008328 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update provides google-cloud-sdk 140.0.0, which brings many new features, enhancements and bug fixes. For a comprehensive list of changes, please refer to the package's change log. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-970=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-970=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): google-cloud-sdk-140.0.0-10.1 - openSUSE Leap 42.2 (noarch): google-cloud-sdk-140.0.0-4.6.1 References: https://bugzilla.suse.com/1002895 https://bugzilla.suse.com/1008328

1 0

openSUSE-OU-2017:2268-1: Initial release of Google Cloud SDK dependencies
by maintenance＠opensuse.org 25 Aug '17

25 Aug '17

openSUSE Optional Update: Initial release of Google Cloud SDK dependencies ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:2268-1 Rating: low References: #1002895 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update contains a set of Python modules required by newer versions of the Google Cloud SDK. This update contains: - python-wcwidth - python-ruamel.base - python-ruamel.orderdict - pytnon-ruamel.yaml This update was imported from the SUSE:SLE-12:Update update repository. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-969=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): python-ruamel.ordereddict-0.4.9-2.1 python-ruamel.ordereddict-debuginfo-0.4.9-2.1 python-ruamel.ordereddict-debugsource-0.4.9-2.1 python-ruamel.yaml-0.12.14-2.1 python-ruamel.yaml-debuginfo-0.12.14-2.1 python-ruamel.yaml-debugsource-0.12.14-2.1 - openSUSE Leap 42.2 (noarch): python-ruamel.base-1.0.0-2.1 python-wcwidth-0.1.4-2.1 References: https://bugzilla.suse.com/1002895

1 0

openSUSE-RU-2017:2253-1: Recommended update for Cloud SDK dependencies
by maintenance＠opensuse.org 25 Aug '17

25 Aug '17

openSUSE Recommended Update: Recommended update for Cloud SDK dependencies ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2253-1 Rating: low References: #1002895 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update contains a set of Python modules required by newer versions of the Google Cloud SDK. - python-dulwich 0.16.3 - python-monotonic 1.2 This version is a run-time dependency for an upcoming update of google-cloud-sdk. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-967=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-967=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): python-dulwich-0.16.3-8.1 python-dulwich-debuginfo-0.16.3-8.1 python-dulwich-debugsource-0.16.3-8.1 - openSUSE Leap 42.3 (noarch): python-monotonic-1.2-5.1 - openSUSE Leap 42.2 (i586 x86_64): python-dulwich-0.16.3-5.3.1 python-dulwich-debuginfo-0.16.3-5.3.1 python-dulwich-debugsource-0.16.3-5.3.1 - openSUSE Leap 42.2 (noarch): python-monotonic-1.2-2.3.1 References: https://bugzilla.suse.com/1002895

1 0