September 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2550-1: moderate: Security update for libzip
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for libzip ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2550-1 Rating: moderate References: #1056996 Cross-References: CVE-2017-14107 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libzip fixes the following security issue: - CVE-2017-14107: The _zip_read_eocd64 function mishandled EOCD records, which allowed remote attackers to cause a denial of service (memory allocation failure in _zip_cdir_grow in zip_dirent.c) via a crafted ZIP archive (bsc#1056996). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1084=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1084=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libzip-0.11.1-9.1 libzip-debuginfo-0.11.1-9.1 libzip-debugsource-0.11.1-9.1 libzip-devel-0.11.1-9.1 libzip2-0.11.1-9.1 libzip2-debuginfo-0.11.1-9.1 - openSUSE Leap 42.3 (x86_64): libzip2-32bit-0.11.1-9.1 libzip2-debuginfo-32bit-0.11.1-9.1 - openSUSE Leap 42.2 (i586 x86_64): libzip-0.11.1-6.3.1 libzip-debuginfo-0.11.1-6.3.1 libzip-debugsource-0.11.1-6.3.1 libzip-devel-0.11.1-6.3.1 libzip2-0.11.1-6.3.1 libzip2-debuginfo-0.11.1-6.3.1 - openSUSE Leap 42.2 (x86_64): libzip2-32bit-0.11.1-6.3.1 libzip2-debuginfo-32bit-0.11.1-6.3.1 References: https://www.suse.com/security/cve/CVE-2017-14107.html https://bugzilla.suse.com/1056996

1 0

openSUSE-SU-2017:2549-1: moderate: Security update for apache2
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for apache2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2549-1 Rating: moderate References: #1058058 Cross-References: CVE-2017-9798 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for apache2 fixes the following security issue: - CVE-2017-9798: Prevent use-after-free use of memory that allowed for an information leak via OPTIONS (bsc#1058058). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1083=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1083=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-2.4.23-16.1 apache2-debuginfo-2.4.23-16.1 apache2-debugsource-2.4.23-16.1 apache2-devel-2.4.23-16.1 apache2-event-2.4.23-16.1 apache2-event-debuginfo-2.4.23-16.1 apache2-example-pages-2.4.23-16.1 apache2-prefork-2.4.23-16.1 apache2-prefork-debuginfo-2.4.23-16.1 apache2-utils-2.4.23-16.1 apache2-utils-debuginfo-2.4.23-16.1 apache2-worker-2.4.23-16.1 apache2-worker-debuginfo-2.4.23-16.1 - openSUSE Leap 42.3 (noarch): apache2-doc-2.4.23-16.1 - openSUSE Leap 42.2 (i586 x86_64): apache2-2.4.23-8.12.1 apache2-debuginfo-2.4.23-8.12.1 apache2-debugsource-2.4.23-8.12.1 apache2-devel-2.4.23-8.12.1 apache2-event-2.4.23-8.12.1 apache2-event-debuginfo-2.4.23-8.12.1 apache2-example-pages-2.4.23-8.12.1 apache2-prefork-2.4.23-8.12.1 apache2-prefork-debuginfo-2.4.23-8.12.1 apache2-utils-2.4.23-8.12.1 apache2-utils-debuginfo-2.4.23-8.12.1 apache2-worker-2.4.23-8.12.1 apache2-worker-debuginfo-2.4.23-8.12.1 - openSUSE Leap 42.2 (noarch): apache2-doc-2.4.23-8.12.1 References: https://www.suse.com/security/cve/CVE-2017-9798.html https://bugzilla.suse.com/1058058

1 0

openSUSE-SU-2017:2540-1: important: Security update for xen
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2540-1 Rating: important References: #1027519 #1055695 #1056278 #1056280 #1056281 #1056282 Cross-References: CVE-2017-14316 CVE-2017-14317 CVE-2017-14318 CVE-2017-14319 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves four vulnerabilities and has two fixes is now available. Description: This update for xen fixes several issues. These security issues were fixed: - CVE-2017-14316: Missing bound check in function `alloc_heap_pages` for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278) - CVE-2017-14318: The function __gnttab_cache_flush missed a check for grant tables, allowing a malicious guest to crash the host or for x86 PV guests to potentially escalate privileges (XSA-232, bsc#1056280) - CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281). - CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282). These non-security issues were fixed: - bsc#1055695: Fixed restoring updates for HVM guests for ballooned domUs This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1080=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xen-debugsource-4.7.3_04-11.15.1 xen-devel-4.7.3_04-11.15.1 xen-libs-4.7.3_04-11.15.1 xen-libs-debuginfo-4.7.3_04-11.15.1 xen-tools-domU-4.7.3_04-11.15.1 xen-tools-domU-debuginfo-4.7.3_04-11.15.1 - openSUSE Leap 42.2 (x86_64): xen-4.7.3_04-11.15.1 xen-doc-html-4.7.3_04-11.15.1 xen-libs-32bit-4.7.3_04-11.15.1 xen-libs-debuginfo-32bit-4.7.3_04-11.15.1 xen-tools-4.7.3_04-11.15.1 xen-tools-debuginfo-4.7.3_04-11.15.1 References: https://www.suse.com/security/cve/CVE-2017-14316.html https://www.suse.com/security/cve/CVE-2017-14317.html https://www.suse.com/security/cve/CVE-2017-14318.html https://www.suse.com/security/cve/CVE-2017-14319.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1055695 https://bugzilla.suse.com/1056278 https://bugzilla.suse.com/1056280 https://bugzilla.suse.com/1056281 https://bugzilla.suse.com/1056282

1 0

openSUSE-SU-2017:2539-1: Security update for freexl
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for freexl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2539-1 Rating: low References: #1058431 #1058433 Cross-References: CVE-2017-2923 CVE-2017-2924 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the read_legacy_biff function (bsc#1058433). - CVE-2017-2923: Prevent heap-based buffer overflow in the read_biff_next_record function (bsc#1058431). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1082=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): freexl-debugsource-1.0.4-5.1 freexl-devel-1.0.4-5.1 libfreexl1-1.0.4-5.1 libfreexl1-debuginfo-1.0.4-5.1 References: https://www.suse.com/security/cve/CVE-2017-2923.html https://www.suse.com/security/cve/CVE-2017-2924.html https://bugzilla.suse.com/1058431 https://bugzilla.suse.com/1058433

1 0

openSUSE-SU-2017:2538-1: moderate: Security update for fossil
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for fossil ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2538-1 Rating: moderate References: #1053267 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for fossil to version fixes security issues and bugs. The following vulnerabilities were fixed: - boo#1053267: XSS vulnerability on the /help webpage The version update to version 2.3 also contains a number of upstream improvements and bug fixes. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1081=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): fossil-2.3-5.3.1 fossil-debuginfo-2.3-5.3.1 fossil-debugsource-2.3-5.3.1 References: https://bugzilla.suse.com/1053267

1 0

openSUSE-SU-2017:2537-1: Security update for freexl
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for freexl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2537-1 Rating: low References: #1058431 #1058433 Cross-References: CVE-2017-2923 CVE-2017-2924 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for freexl to version 1.0.4 fixes several issues. These security issues were fixed: - CVE-2017-2924: Prevent heap-based buffer overflow in the read_legacy_biff function (bsc#1058433). - CVE-2017-2923: Prevent heap-based buffer overflow in the read_biff_next_record function (bsc#1058431). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1082=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1082=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): freexl-debugsource-1.0.4-5.1 freexl-devel-1.0.4-5.1 libfreexl1-1.0.4-5.1 libfreexl1-debuginfo-1.0.4-5.1 - openSUSE Leap 42.2 (i586 x86_64): freexl-debugsource-1.0.4-2.3.1 freexl-devel-1.0.4-2.3.1 libfreexl1-1.0.4-2.3.1 libfreexl1-debuginfo-1.0.4-2.3.1 References: https://www.suse.com/security/cve/CVE-2017-2923.html https://www.suse.com/security/cve/CVE-2017-2924.html https://bugzilla.suse.com/1058431 https://bugzilla.suse.com/1058433

1 0

openSUSE-SU-2017:2536-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2536-1 Rating: moderate References: #1054430 Cross-References: CVE-2017-12933 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for php5 fixes on issues. This security issue was fixed: - CVE-2017-12933: The finish_nested_data function in ext/standard/var_unserializer.re was prone to a buffer over-read while unserializing untrusted data. Exploitation of this issue could have had an unspecified impact on the integrity of PHP (bsc#1054430) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1079=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1079=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): apache2-mod_php5-5.5.14-85.1 apache2-mod_php5-debuginfo-5.5.14-85.1 php5-5.5.14-85.1 php5-bcmath-5.5.14-85.1 php5-bcmath-debuginfo-5.5.14-85.1 php5-bz2-5.5.14-85.1 php5-bz2-debuginfo-5.5.14-85.1 php5-calendar-5.5.14-85.1 php5-calendar-debuginfo-5.5.14-85.1 php5-ctype-5.5.14-85.1 php5-ctype-debuginfo-5.5.14-85.1 php5-curl-5.5.14-85.1 php5-curl-debuginfo-5.5.14-85.1 php5-dba-5.5.14-85.1 php5-dba-debuginfo-5.5.14-85.1 php5-debuginfo-5.5.14-85.1 php5-debugsource-5.5.14-85.1 php5-devel-5.5.14-85.1 php5-dom-5.5.14-85.1 php5-dom-debuginfo-5.5.14-85.1 php5-enchant-5.5.14-85.1 php5-enchant-debuginfo-5.5.14-85.1 php5-exif-5.5.14-85.1 php5-exif-debuginfo-5.5.14-85.1 php5-fastcgi-5.5.14-85.1 php5-fastcgi-debuginfo-5.5.14-85.1 php5-fileinfo-5.5.14-85.1 php5-fileinfo-debuginfo-5.5.14-85.1 php5-firebird-5.5.14-85.1 php5-firebird-debuginfo-5.5.14-85.1 php5-fpm-5.5.14-85.1 php5-fpm-debuginfo-5.5.14-85.1 php5-ftp-5.5.14-85.1 php5-ftp-debuginfo-5.5.14-85.1 php5-gd-5.5.14-85.1 php5-gd-debuginfo-5.5.14-85.1 php5-gettext-5.5.14-85.1 php5-gettext-debuginfo-5.5.14-85.1 php5-gmp-5.5.14-85.1 php5-gmp-debuginfo-5.5.14-85.1 php5-iconv-5.5.14-85.1 php5-iconv-debuginfo-5.5.14-85.1 php5-imap-5.5.14-85.1 php5-imap-debuginfo-5.5.14-85.1 php5-intl-5.5.14-85.1 php5-intl-debuginfo-5.5.14-85.1 php5-json-5.5.14-85.1 php5-json-debuginfo-5.5.14-85.1 php5-ldap-5.5.14-85.1 php5-ldap-debuginfo-5.5.14-85.1 php5-mbstring-5.5.14-85.1 php5-mbstring-debuginfo-5.5.14-85.1 php5-mcrypt-5.5.14-85.1 php5-mcrypt-debuginfo-5.5.14-85.1 php5-mssql-5.5.14-85.1 php5-mssql-debuginfo-5.5.14-85.1 php5-mysql-5.5.14-85.1 php5-mysql-debuginfo-5.5.14-85.1 php5-odbc-5.5.14-85.1 php5-odbc-debuginfo-5.5.14-85.1 php5-opcache-5.5.14-85.1 php5-opcache-debuginfo-5.5.14-85.1 php5-openssl-5.5.14-85.1 php5-openssl-debuginfo-5.5.14-85.1 php5-pcntl-5.5.14-85.1 php5-pcntl-debuginfo-5.5.14-85.1 php5-pdo-5.5.14-85.1 php5-pdo-debuginfo-5.5.14-85.1 php5-pgsql-5.5.14-85.1 php5-pgsql-debuginfo-5.5.14-85.1 php5-phar-5.5.14-85.1 php5-phar-debuginfo-5.5.14-85.1 php5-posix-5.5.14-85.1 php5-posix-debuginfo-5.5.14-85.1 php5-pspell-5.5.14-85.1 php5-pspell-debuginfo-5.5.14-85.1 php5-readline-5.5.14-85.1 php5-readline-debuginfo-5.5.14-85.1 php5-shmop-5.5.14-85.1 php5-shmop-debuginfo-5.5.14-85.1 php5-snmp-5.5.14-85.1 php5-snmp-debuginfo-5.5.14-85.1 php5-soap-5.5.14-85.1 php5-soap-debuginfo-5.5.14-85.1 php5-sockets-5.5.14-85.1 php5-sockets-debuginfo-5.5.14-85.1 php5-sqlite-5.5.14-85.1 php5-sqlite-debuginfo-5.5.14-85.1 php5-suhosin-5.5.14-85.1 php5-suhosin-debuginfo-5.5.14-85.1 php5-sysvmsg-5.5.14-85.1 php5-sysvmsg-debuginfo-5.5.14-85.1 php5-sysvsem-5.5.14-85.1 php5-sysvsem-debuginfo-5.5.14-85.1 php5-sysvshm-5.5.14-85.1 php5-sysvshm-debuginfo-5.5.14-85.1 php5-tidy-5.5.14-85.1 php5-tidy-debuginfo-5.5.14-85.1 php5-tokenizer-5.5.14-85.1 php5-tokenizer-debuginfo-5.5.14-85.1 php5-wddx-5.5.14-85.1 php5-wddx-debuginfo-5.5.14-85.1 php5-xmlreader-5.5.14-85.1 php5-xmlreader-debuginfo-5.5.14-85.1 php5-xmlrpc-5.5.14-85.1 php5-xmlrpc-debuginfo-5.5.14-85.1 php5-xmlwriter-5.5.14-85.1 php5-xmlwriter-debuginfo-5.5.14-85.1 php5-xsl-5.5.14-85.1 php5-xsl-debuginfo-5.5.14-85.1 php5-zip-5.5.14-85.1 php5-zip-debuginfo-5.5.14-85.1 php5-zlib-5.5.14-85.1 php5-zlib-debuginfo-5.5.14-85.1 - openSUSE Leap 42.3 (noarch): php5-pear-5.5.14-85.1 - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-77.12.1 apache2-mod_php5-debuginfo-5.5.14-77.12.1 php5-5.5.14-77.12.1 php5-bcmath-5.5.14-77.12.1 php5-bcmath-debuginfo-5.5.14-77.12.1 php5-bz2-5.5.14-77.12.1 php5-bz2-debuginfo-5.5.14-77.12.1 php5-calendar-5.5.14-77.12.1 php5-calendar-debuginfo-5.5.14-77.12.1 php5-ctype-5.5.14-77.12.1 php5-ctype-debuginfo-5.5.14-77.12.1 php5-curl-5.5.14-77.12.1 php5-curl-debuginfo-5.5.14-77.12.1 php5-dba-5.5.14-77.12.1 php5-dba-debuginfo-5.5.14-77.12.1 php5-debuginfo-5.5.14-77.12.1 php5-debugsource-5.5.14-77.12.1 php5-devel-5.5.14-77.12.1 php5-dom-5.5.14-77.12.1 php5-dom-debuginfo-5.5.14-77.12.1 php5-enchant-5.5.14-77.12.1 php5-enchant-debuginfo-5.5.14-77.12.1 php5-exif-5.5.14-77.12.1 php5-exif-debuginfo-5.5.14-77.12.1 php5-fastcgi-5.5.14-77.12.1 php5-fastcgi-debuginfo-5.5.14-77.12.1 php5-fileinfo-5.5.14-77.12.1 php5-fileinfo-debuginfo-5.5.14-77.12.1 php5-firebird-5.5.14-77.12.1 php5-firebird-debuginfo-5.5.14-77.12.1 php5-fpm-5.5.14-77.12.1 php5-fpm-debuginfo-5.5.14-77.12.1 php5-ftp-5.5.14-77.12.1 php5-ftp-debuginfo-5.5.14-77.12.1 php5-gd-5.5.14-77.12.1 php5-gd-debuginfo-5.5.14-77.12.1 php5-gettext-5.5.14-77.12.1 php5-gettext-debuginfo-5.5.14-77.12.1 php5-gmp-5.5.14-77.12.1 php5-gmp-debuginfo-5.5.14-77.12.1 php5-iconv-5.5.14-77.12.1 php5-iconv-debuginfo-5.5.14-77.12.1 php5-imap-5.5.14-77.12.1 php5-imap-debuginfo-5.5.14-77.12.1 php5-intl-5.5.14-77.12.1 php5-intl-debuginfo-5.5.14-77.12.1 php5-json-5.5.14-77.12.1 php5-json-debuginfo-5.5.14-77.12.1 php5-ldap-5.5.14-77.12.1 php5-ldap-debuginfo-5.5.14-77.12.1 php5-mbstring-5.5.14-77.12.1 php5-mbstring-debuginfo-5.5.14-77.12.1 php5-mcrypt-5.5.14-77.12.1 php5-mcrypt-debuginfo-5.5.14-77.12.1 php5-mssql-5.5.14-77.12.1 php5-mssql-debuginfo-5.5.14-77.12.1 php5-mysql-5.5.14-77.12.1 php5-mysql-debuginfo-5.5.14-77.12.1 php5-odbc-5.5.14-77.12.1 php5-odbc-debuginfo-5.5.14-77.12.1 php5-opcache-5.5.14-77.12.1 php5-opcache-debuginfo-5.5.14-77.12.1 php5-openssl-5.5.14-77.12.1 php5-openssl-debuginfo-5.5.14-77.12.1 php5-pcntl-5.5.14-77.12.1 php5-pcntl-debuginfo-5.5.14-77.12.1 php5-pdo-5.5.14-77.12.1 php5-pdo-debuginfo-5.5.14-77.12.1 php5-pgsql-5.5.14-77.12.1 php5-pgsql-debuginfo-5.5.14-77.12.1 php5-phar-5.5.14-77.12.1 php5-phar-debuginfo-5.5.14-77.12.1 php5-posix-5.5.14-77.12.1 php5-posix-debuginfo-5.5.14-77.12.1 php5-pspell-5.5.14-77.12.1 php5-pspell-debuginfo-5.5.14-77.12.1 php5-readline-5.5.14-77.12.1 php5-readline-debuginfo-5.5.14-77.12.1 php5-shmop-5.5.14-77.12.1 php5-shmop-debuginfo-5.5.14-77.12.1 php5-snmp-5.5.14-77.12.1 php5-snmp-debuginfo-5.5.14-77.12.1 php5-soap-5.5.14-77.12.1 php5-soap-debuginfo-5.5.14-77.12.1 php5-sockets-5.5.14-77.12.1 php5-sockets-debuginfo-5.5.14-77.12.1 php5-sqlite-5.5.14-77.12.1 php5-sqlite-debuginfo-5.5.14-77.12.1 php5-suhosin-5.5.14-77.12.1 php5-suhosin-debuginfo-5.5.14-77.12.1 php5-sysvmsg-5.5.14-77.12.1 php5-sysvmsg-debuginfo-5.5.14-77.12.1 php5-sysvsem-5.5.14-77.12.1 php5-sysvsem-debuginfo-5.5.14-77.12.1 php5-sysvshm-5.5.14-77.12.1 php5-sysvshm-debuginfo-5.5.14-77.12.1 php5-tidy-5.5.14-77.12.1 php5-tidy-debuginfo-5.5.14-77.12.1 php5-tokenizer-5.5.14-77.12.1 php5-tokenizer-debuginfo-5.5.14-77.12.1 php5-wddx-5.5.14-77.12.1 php5-wddx-debuginfo-5.5.14-77.12.1 php5-xmlreader-5.5.14-77.12.1 php5-xmlreader-debuginfo-5.5.14-77.12.1 php5-xmlrpc-5.5.14-77.12.1 php5-xmlrpc-debuginfo-5.5.14-77.12.1 php5-xmlwriter-5.5.14-77.12.1 php5-xmlwriter-debuginfo-5.5.14-77.12.1 php5-xsl-5.5.14-77.12.1 php5-xsl-debuginfo-5.5.14-77.12.1 php5-zip-5.5.14-77.12.1 php5-zip-debuginfo-5.5.14-77.12.1 php5-zlib-5.5.14-77.12.1 php5-zlib-debuginfo-5.5.14-77.12.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-77.12.1 References: https://www.suse.com/security/cve/CVE-2017-12933.html https://bugzilla.suse.com/1054430

1 0

openSUSE-SU-2017:2535-1: important: Security update for emacs
by opensuse-security＠opensuse.org 21 Sep '17

21 Sep '17

openSUSE Security Update: Security update for emacs ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2535-1 Rating: important References: #1058425 Cross-References: CVE-2017-14482 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for emacs fixes one issues. This security issue was fixed: - CVE-2017-14482: Remote code execution via mails with "Content-Type: text/enriched" (bsc#1058425) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1078=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1078=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): emacs-24.3-28.1 emacs-debuginfo-24.3-28.1 emacs-debugsource-24.3-28.1 emacs-nox-24.3-28.1 emacs-nox-debuginfo-24.3-28.1 emacs-x11-24.3-28.1 emacs-x11-debuginfo-24.3-28.1 etags-24.3-28.1 etags-debuginfo-24.3-28.1 - openSUSE Leap 42.3 (noarch): emacs-el-24.3-28.1 emacs-info-24.3-28.1 - openSUSE Leap 42.2 (i586 x86_64): emacs-24.3-24.6.1 emacs-debuginfo-24.3-24.6.1 emacs-debugsource-24.3-24.6.1 emacs-nox-24.3-24.6.1 emacs-nox-debuginfo-24.3-24.6.1 emacs-x11-24.3-24.6.1 emacs-x11-debuginfo-24.3-24.6.1 etags-24.3-24.6.1 etags-debuginfo-24.3-24.6.1 - openSUSE Leap 42.2 (noarch): emacs-el-24.3-24.6.1 emacs-info-24.3-24.6.1 References: https://www.suse.com/security/cve/CVE-2017-14482.html https://bugzilla.suse.com/1058425

1 0

openSUSE-RU-2017:2531-1: moderate: Recommended update for gnustep-base
by maintenance＠opensuse.org 20 Sep '17

20 Sep '17

openSUSE Recommended Update: Recommended update for gnustep-base ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2531-1 Rating: moderate References: #1034091 #1055816 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gnustep-base fixes the following issues: - gnustep-base would run dhnc unconditionally (boo#1055816) - GNUstep did not require gnustep-make as a run-time dependency (boo#1034091) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1077=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): gnustep-base-1.25.0-3.1 gnustep-base-debuginfo-1.25.0-3.1 gnustep-base-debugsource-1.25.0-3.1 gnustep-base-devel-1.25.0-3.1 References: https://bugzilla.suse.com/1034091 https://bugzilla.suse.com/1055816

1 0

openSUSE-RU-2017:2528-1: Recommended update for ktorrent
by maintenance＠opensuse.org 20 Sep '17

20 Sep '17

openSUSE Recommended Update: Recommended update for ktorrent ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2528-1 Rating: low References: #1002948 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ktorrent fixes the following issues: - Empty tip of the day was shown (boo#1002948) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-1076=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): ktorrent-5.0.1-5.1 ktorrent-debuginfo-5.0.1-5.1 ktorrent-debugsource-5.0.1-5.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): ktorrent-lang-5.0.1-5.1 References: https://bugzilla.suse.com/1002948

1 0