September 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2501-1: moderate: Security update for ffmpeg, ffmpeg2
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for ffmpeg, ffmpeg2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2501-1 Rating: moderate References: #1041794 #1046211 #1049095 #1056760 #1056761 #1056762 #1056763 #1056765 #1056766 #1057536 #1057537 #1057539 #1058018 #1058019 #1058020 Cross-References: CVE-2017-11399 CVE-2017-14054 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14058 CVE-2017-14059 CVE-2017-14169 CVE-2017-14170 CVE-2017-14171 CVE-2017-14222 CVE-2017-14223 CVE-2017-14225 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 13 vulnerabilities and has two fixes is now available. Description: This update introduces lame and twolame. For ffmpeg2 it updates to version 2.8.13 and fixes several issues. These security issues were fixed: - CVE-2017-14058: The read_data function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to cause a denial of service (infinite loop) (bsc#1056762) - CVE-2017-14057: In asf_read_marker() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but did not contain sufficient backing data, was provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056761) - CVE-2017-14059: A DoS in cine_read_header() due to lack of an EOF check might have caused huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but did not contain sufficient backing data, was provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056763) - CVE-2017-14056: A DoS in rl2_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but did not contain sufficient backing data, was provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056760) - CVE-2017-14055: a DoS in mv_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but did not contain sufficient backing data, was provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056766) - boo#1046211: Lots of integer overflow fixes - CVE-2017-14169: In the mxf_read_primer_pack function an integer signedness error have might occured when a crafted file, which claims a large "item_num" field such as 0xffffffff, was provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value (bsc#1057536) - CVE-2017-14170: Prevent DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU resources, since there was no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file (bsc#1057537) - CVE-2017-14171: Prevent DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check taht might have caused huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but did not contain sufficient backing data, was provided, the loop over 'table_entries_used' would consume huge CPU resources, since there was no EOF check inside the loop (bsc#1057539) - !: CVE-2017-14223: Prevent DoS in asf_build_simple_index() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but did not contain sufficient backing data, was provided, the for loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058019) - !: CVE-2017-14222: Prevent DoS in read_tfra() due to lack of an EOF (End of File) check that might have caused huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058020) These non-security issues were fixed: - Unconditionalize celt, ass, openjpeg, webp, libva, vdpau. - Build unconditionally with lame and twolame For ffmpeg it updates to version 3.3.4 and fixes several issues. These security issues were fixed: - CVE-2017-14058: The read_data function in libavformat/hls.c did not restrict reload attempts for an insufficient list, which allowed remote attackers to cause a denial of service (infinite loop) (bsc#1056762) - CVE-2017-14057: In asf_read_marker() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted ASF file, which claims a large "name_len" or "count" field in the header but did not contain sufficient backing data, was provided, the loops over the name and markers would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056761) - CVE-2017-14059: A DoS in cine_read_header() due to lack of an EOF check might have caused huge CPU and memory consumption. When a crafted CINE file, which claims a large "duration" field in the header but did not contain sufficient backing data, was provided, the image-offset parsing loop would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056763) - CVE-2017-14054: A DoS in ivr_read_header() due to lack of an EOF (End of File) check might have caused huge CPU consumption. When a crafted IVR file, which claims a large "len" field in the header but did not contain sufficient backing data, was provided, the first type==4 loop would consume huge CPU resources, since there is no EOF check inside the loop (bsc#1056765) - CVE-2017-14056: A DoS in rl2_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted RL2 file, which claims a large "frame_count" field in the header but did not contain sufficient backing data, was provided, the loops (for offset and size tables) would consume huge CPU and memory resources, since there is no EOF check inside these loops (bsc#1056760) - CVE-2017-14055: a DoS in mv_read_header() due to lack of an EOF (End of File) check might have caused huge CPU and memory consumption. When a crafted MV file, which claims a large "nb_frames" field in the header but did not contain sufficient backing data, was provided, the loop over the frames would consume huge CPU and memory resources, since there is no EOF check inside the loop (bsc#1056766) - CVE-2017-11399: Integer overflow in the ape_decode_frame function allowed remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file (bsc#1049095) - CVE-2017-14171: Prevent DoS in nsv_parse_NSVf_header() due to lack of an EOF (End of File) check taht might have caused huge CPU consumption. When a crafted NSV file, which claims a large "table_entries_used" field in the header but did not contain sufficient backing data, was provided, the loop over 'table_entries_used' would consume huge CPU resources, since there was no EOF check inside the loop (bsc#1057539) - CVE-2017-14170: Prevent DoS in mxf_read_index_entry_array() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted MXF file, which claims a large "nb_index_entries" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU resources, since there was no EOF check inside the loop. Moreover, this big loop can be invoked multiple times if there is more than one applicable data segment in the crafted MXF file (bsc#1057537) - CVE-2017-14169: In the mxf_read_primer_pack function an integer signedness error have might occured when a crafted file, which claims a large "item_num" field such as 0xffffffff, was provided. As a result, the variable "item_num" turns negative, bypassing the check for a large value (bsc#1057536) - CVE-2017-14225: The av_color_primaries_name function may have returned a NULL pointer depending on a value contained in a file, but callers did not anticipate this, leading to a NULL pointer dereference (bsc#1058018) - CVE-2017-14223: Prevent DoS in asf_build_simple_index() due to lack of an EOF (End of File) check that might have caused huge CPU consumption. When a crafted ASF file, which claims a large "ict" field in the header but did not contain sufficient backing data, was provided, the for loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058019) - CVE-2017-14222: Prevent DoS in read_tfra() due to lack of an EOF (End of File) check that might have caused huge CPU and memory consumption. When a crafted MOV file, which claims a large "item_count" field in the header but did not contain sufficient backing data, was provided, the loop would consume huge CPU and memory resources, since there was no EOF check inside the loop (bsc#1058020) It also includes various fixes for integer overflows and too-large bit shifts that didn't receive a CVE. These non-security issues were fixed: - Unconditionalize celt, ass, openjpeg, webp, netcdf, libva, vdpau. - Build unconditionally with lame and twolame - boo#1041794: Disable cuda extensions - Add additional checks to ensure MPEG is off Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1068=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ffmpeg-3.3.4-6.16.1 ffmpeg-debuginfo-3.3.4-6.16.1 ffmpeg-debugsource-3.3.4-6.16.1 ffmpeg2-debugsource-2.8.13-25.10.1 ffmpeg2-devel-2.8.13-25.10.1 lame-3.99.5-2.1 lame-debuginfo-3.99.5-2.1 lame-debugsource-3.99.5-2.1 lame-doc-3.99.5-2.1 lame-mp3rtp-3.99.5-2.1 lame-mp3rtp-debuginfo-3.99.5-2.1 libavcodec-devel-3.3.4-6.16.1 libavcodec56-2.8.13-25.10.1 libavcodec56-debuginfo-2.8.13-25.10.1 libavcodec57-3.3.4-6.16.1 libavcodec57-debuginfo-3.3.4-6.16.1 libavdevice-devel-3.3.4-6.16.1 libavdevice56-2.8.13-25.10.1 libavdevice56-debuginfo-2.8.13-25.10.1 libavdevice57-3.3.4-6.16.1 libavdevice57-debuginfo-3.3.4-6.16.1 libavfilter-devel-3.3.4-6.16.1 libavfilter5-2.8.13-25.10.1 libavfilter5-debuginfo-2.8.13-25.10.1 libavfilter6-3.3.4-6.16.1 libavfilter6-debuginfo-3.3.4-6.16.1 libavformat-devel-3.3.4-6.16.1 libavformat56-2.8.13-25.10.1 libavformat56-debuginfo-2.8.13-25.10.1 libavformat57-3.3.4-6.16.1 libavformat57-debuginfo-3.3.4-6.16.1 libavresample-devel-3.3.4-6.16.1 libavresample2-2.8.13-25.10.1 libavresample2-debuginfo-2.8.13-25.10.1 libavresample3-3.3.4-6.16.1 libavresample3-debuginfo-3.3.4-6.16.1 libavutil-devel-3.3.4-6.16.1 libavutil54-2.8.13-25.10.1 libavutil54-debuginfo-2.8.13-25.10.1 libavutil55-3.3.4-6.16.1 libavutil55-debuginfo-3.3.4-6.16.1 libmp3lame-devel-3.99.5-2.1 libmp3lame0-3.99.5-2.1 libmp3lame0-debuginfo-3.99.5-2.1 libpostproc-devel-3.3.4-6.16.1 libpostproc53-2.8.13-25.10.1 libpostproc53-debuginfo-2.8.13-25.10.1 libpostproc54-3.3.4-6.16.1 libpostproc54-debuginfo-3.3.4-6.16.1 libswresample-devel-3.3.4-6.16.1 libswresample1-2.8.13-25.10.1 libswresample1-debuginfo-2.8.13-25.10.1 libswresample2-3.3.4-6.16.1 libswresample2-debuginfo-3.3.4-6.16.1 libswscale-devel-3.3.4-6.16.1 libswscale3-2.8.13-25.10.1 libswscale3-debuginfo-2.8.13-25.10.1 libswscale4-3.3.4-6.16.1 libswscale4-debuginfo-3.3.4-6.16.1 libtwolame-devel-0.3.13-2.1 libtwolame0-0.3.13-2.1 libtwolame0-debuginfo-0.3.13-2.1 twolame-0.3.13-2.1 twolame-debuginfo-0.3.13-2.1 twolame-debugsource-0.3.13-2.1 - openSUSE Leap 42.2 (x86_64): libavcodec56-32bit-2.8.13-25.10.1 libavcodec56-debuginfo-32bit-2.8.13-25.10.1 libavcodec57-32bit-3.3.4-6.16.1 libavcodec57-debuginfo-32bit-3.3.4-6.16.1 libavdevice56-32bit-2.8.13-25.10.1 libavdevice56-debuginfo-32bit-2.8.13-25.10.1 libavdevice57-32bit-3.3.4-6.16.1 libavdevice57-debuginfo-32bit-3.3.4-6.16.1 libavfilter5-32bit-2.8.13-25.10.1 libavfilter5-debuginfo-32bit-2.8.13-25.10.1 libavfilter6-32bit-3.3.4-6.16.1 libavfilter6-debuginfo-32bit-3.3.4-6.16.1 libavformat56-32bit-2.8.13-25.10.1 libavformat56-debuginfo-32bit-2.8.13-25.10.1 libavformat57-32bit-3.3.4-6.16.1 libavformat57-debuginfo-32bit-3.3.4-6.16.1 libavresample2-32bit-2.8.13-25.10.1 libavresample2-debuginfo-32bit-2.8.13-25.10.1 libavresample3-32bit-3.3.4-6.16.1 libavresample3-debuginfo-32bit-3.3.4-6.16.1 libavutil54-32bit-2.8.13-25.10.1 libavutil54-debuginfo-32bit-2.8.13-25.10.1 libavutil55-32bit-3.3.4-6.16.1 libavutil55-debuginfo-32bit-3.3.4-6.16.1 libmp3lame0-32bit-3.99.5-2.1 libmp3lame0-debuginfo-32bit-3.99.5-2.1 libpostproc53-32bit-2.8.13-25.10.1 libpostproc53-debuginfo-32bit-2.8.13-25.10.1 libpostproc54-32bit-3.3.4-6.16.1 libpostproc54-debuginfo-32bit-3.3.4-6.16.1 libswresample1-32bit-2.8.13-25.10.1 libswresample1-debuginfo-32bit-2.8.13-25.10.1 libswresample2-32bit-3.3.4-6.16.1 libswresample2-debuginfo-32bit-3.3.4-6.16.1 libswscale3-32bit-2.8.13-25.10.1 libswscale3-debuginfo-32bit-2.8.13-25.10.1 libswscale4-32bit-3.3.4-6.16.1 libswscale4-debuginfo-32bit-3.3.4-6.16.1 libtwolame0-32bit-0.3.13-2.1 libtwolame0-debuginfo-32bit-0.3.13-2.1 References: https://www.suse.com/security/cve/CVE-2017-11399.html https://www.suse.com/security/cve/CVE-2017-14054.html https://www.suse.com/security/cve/CVE-2017-14055.html https://www.suse.com/security/cve/CVE-2017-14056.html https://www.suse.com/security/cve/CVE-2017-14057.html https://www.suse.com/security/cve/CVE-2017-14058.html https://www.suse.com/security/cve/CVE-2017-14059.html https://www.suse.com/security/cve/CVE-2017-14169.html https://www.suse.com/security/cve/CVE-2017-14170.html https://www.suse.com/security/cve/CVE-2017-14171.html https://www.suse.com/security/cve/CVE-2017-14222.html https://www.suse.com/security/cve/CVE-2017-14223.html https://www.suse.com/security/cve/CVE-2017-14225.html https://bugzilla.suse.com/1041794 https://bugzilla.suse.com/1046211 https://bugzilla.suse.com/1049095 https://bugzilla.suse.com/1056760 https://bugzilla.suse.com/1056761 https://bugzilla.suse.com/1056762 https://bugzilla.suse.com/1056763 https://bugzilla.suse.com/1056765 https://bugzilla.suse.com/1056766 https://bugzilla.suse.com/1057536 https://bugzilla.suse.com/1057537 https://bugzilla.suse.com/1057539 https://bugzilla.suse.com/1058018 https://bugzilla.suse.com/1058019 https://bugzilla.suse.com/1058020

1 0

openSUSE-RU-2017:2496-1: moderate: Recommended update for yast2-storage
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for yast2-storage ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2496-1 Rating: moderate References: #1044250 #1044434 #1049108 #1051200 #1051210 #988700 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for yast2-storage provides the following fixes: - Fix Btrfs default sub-volume name detection. (bsc#1044434, bsc#1044250) - Mark the description of the first snapshot for translation. (bsc#988700) - Allow different mount points for the home partition. (fate#323532) - Fix installation when the system has a volume group with no logical volumes. (bsc#1049108) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1064=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): yast2-storage-3.2.16.1-3.1 yast2-storage-debuginfo-3.2.16.1-3.1 yast2-storage-debugsource-3.2.16.1-3.1 yast2-storage-devel-3.2.16.1-3.1 References: https://bugzilla.suse.com/1044250 https://bugzilla.suse.com/1044434 https://bugzilla.suse.com/1049108 https://bugzilla.suse.com/1051200 https://bugzilla.suse.com/1051210 https://bugzilla.suse.com/988700

1 0

openSUSE-SU-2017:2495-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2495-1 Rating: important References: #1012829 #1020645 #1020657 #1021424 #1022743 #1024405 #1030850 #1031717 #1031784 #1034048 #1038583 #1047487 #1048155 #1048893 #1048934 #1049226 #1049580 #1051790 #1052580 #1052888 #1053117 #1053802 #1053915 #1053919 #1054084 #1055013 #1055096 #1055359 #1056261 #1056588 #1056827 #1056982 #1057015 #1057389 #1058116 #971975 #981309 Cross-References: CVE-2017-1000251 CVE-2017-11472 CVE-2017-12134 CVE-2017-14051 CVE-2017-14106 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has 32 fixes is now available. Description: The openSUSE Leap 42.2 kernel was updated to 4.4.87 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bnc#1057389). - CVE-2017-14106: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel allowed local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path (bnc#1056982). - CVE-2017-11472: The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel did not flush the operand cache and causes a kernel stack dump, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism (in the kernel through 4.9) via a crafted ACPI table (bnc#1049580). - CVE-2017-14051: An integer overflow in the qla2x00_sysfs_write_optrom_ctl function in drivers/scsi/qla2xxx/qla_attr.c in the Linux kernel allowed local users to cause a denial of service (memory corruption and system crash) by leveraging root access (bnc#1056588). - CVE-2017-12134: The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt block device data streams and consequently obtain sensitive memory information, cause a denial of service, or gain host OS privileges by leveraging incorrect block IO merge-ability calculation (bnc#1051790 1053919). The following non-security bugs were fixed: - acpi / scan: Prefer devices without _HID for _ADR matching (git-fixes). - alsa: hda - Add stereo mic quirk for Lenovo G50-70 (17aa:3978) (bsc#1020657). - alsa: hda - Implement mic-mute LED mode enum (bsc#1055013). - alsa: hda/realtek - Add support headphone Mic for ALC221 of HP platform (bsc#1024405). - alsa: ice1712: Add support for STAudio ADCIII (bsc#1048934). - alsa: usb-audio: Apply sample rate quirk to Sennheiser headset (bsc#1052580). - Add "shutdown" to "struct class" (bsc#1053117). - bluetooth: bnep: fix possible might sleep error in bnep_session (bsc#1031784). - bluetooth: cmtp: fix possible might sleep error in cmtp_session (bsc#1031784). - btrfs: fix early ENOSPC due to delalloc (bsc#1049226). - nfs: flush data when locking a file to ensure cache coherence for mmap (bsc#981309). - Revert "/proc/iomem: only expose physical resource addresses to privileged users" (kabi). - Revert "Make file credentials available to the seqfile interfaces" (kabi). - usb: core: fix device node leak (bsc#1047487). - Update patches.drivers/tpm-141-fix-RC-value-check-in-tpm2_seal_trusted.patch (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes 5ca4c20cfd37). - bnxt: add a missing rcu synchronization (bnc#1038583). - bnxt: do not busy-poll when link is down (bnc#1038583). - bnxt_en: Enable MRU enables bit when configuring VNIC MRU (bnc#1038583). - bnxt_en: Fix "uninitialized variable" bug in TPA code path (bnc#1038583). - bnxt_en: Fix NULL pointer dereference in a failure path during open (bnc#1038583). - bnxt_en: Fix NULL pointer dereference in reopen failure path (bnc#1038583). - bnxt_en: Fix TX push operation on ARM64 (bnc#1038583). - bnxt_en: Fix VF virtual link state (bnc#1038583). - bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583). - bnxt_en: Fix and clarify link_info->advertising (bnc#1038583). - bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583). - bnxt_en: Pad TX packets below 52 bytes (bnc#1038583). - bnxt_en: Refactor TPA code path (bnc#1038583). - bnxt_en: fix pci cleanup in bnxt_init_one() failure path (bnc#1038583). - bnxt_en: initialize rc to zero to avoid returning garbage (bnc#1038583). - ceph: fix readpage from fscache (bsc#1057015). - cxgb4: Fix stack out-of-bounds read due to wrong size to t4_record_mbox() (bsc#1021424 bsc#1022743). - drivers: net: xgene: Fix wrong logical operation (bsc#1056827). - drm/vmwgfx: Limit max desktop dimensions to 8Kx8K (bsc#1048155). - fuse: initialize the flock flag in fuse_file on allocation (git-fixes). - gfs2: Do not clear SGID when inheriting ACLs (bsc#1012829). - ibmvnic: Clean up resources on probe failure (fate#323285, bsc#1058116). - iwlwifi: missing error code in iwl_trans_pcie_alloc() (bsc#1031717). - iwlwifi: mvm: do not send CTDP commands via debugfs if not supported (bsc#1031717). - kernel/*: switch to memdup_user_nul() (bsc#1048893). - lib: test_rhashtable: Fix KASAN warning (bsc#1055359). - lib: test_rhashtable: fix for large entry counts (bsc#1055359). - lightnvm: remove unused rq parameter of nvme_nvm_rqtocmd() to kill warning (FATE#319466). - md/raid5: fix a race condition in stripe batch (linux-stable). - mm, madvise: ensure poisoned pages are removed from per-cpu lists (VM hw poison -- git fixes). - mm/page_alloc.c: apply gfp_allowed_mask before the first allocation attempt (bnc#971975 VM -- git fixes). - mptsas: Fixup device hotplug for VMWare ESXi (bsc#1030850). - netfilter: fix IS_ERR_VALUE usage (bsc#1052888). - netfilter: x_tables: pack percpu counter allocations (bsc#1052888). - netfilter: x_tables: pass xt_counters struct instead of packet counter (bsc#1052888). - netfilter: x_tables: pass xt_counters struct to counter allocator (bsc#1052888). - new helper: memdup_user_nul() (bsc#1048893). - of: fix "/cpus" reference leak in of_numa_parse_cpu_nodes() (bsc#1056827). - ovl: fix dentry leak for default_permissions (bsc#1054084). - percpu_ref: allow operation mode switching operations to be called concurrently (bsc#1055096). - percpu_ref: remove unnecessary RCU grace period for staggered atomic switching confirmation (bsc#1055096). - percpu_ref: reorganize __percpu_ref_switch_to_atomic() and relocate percpu_ref_switch_to_atomic() (bsc#1055096). - percpu_ref: restructure operation mode switching (bsc#1055096). - percpu_ref: unify staggered atomic switching wait behavior (bsc#1055096). - rtnetlink: fix rtnl_vfinfo_size (bsc#1056261). - s390: export symbols for crash-kmp (bsc#1053915). - supported.conf: clear mistaken external support flag for cifs.ko (bsc#1053802). - sysctl: fix lax sysctl_check_table() sanity check (bsc#1048893). - sysctl: fold sysctl_writes_strict checks into helper (bsc#1048893). - sysctl: kdoc'ify sysctl_writes_strict (bsc#1048893). - sysctl: simplify unsigned int support (bsc#1048893). - tpm: Issue a TPM2_Shutdown for TPM2 devices (bsc#1053117). - tpm: KABI fix (bsc#1053117). - tpm: fix: return rc when devm_add_action() fails (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes 8e0ee3c9faed). - tpm: read burstcount from TPM_STS in one 32-bit transaction (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes 27084efee0c3). - tpm_tis_core: Choose appropriate timeout for reading burstcount (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes aec04cbdf723). - tpm_tis_core: convert max timeouts from msec to jiffies (bsc#1020645, fate#321435, fate#321507, fate#321600, bsc#1034048, git-fixes aec04cbdf723). - tty: serial: msm: Support more bauds (git-fixes). - ubifs: Correctly evict xattr inodes (bsc#1012829). - ubifs: Do not leak kernel memory to the MTD (bsc#1012829). - xfs: fix inobt inode allocation search optimization (bsc#1012829). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1062=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): kernel-devel-4.4.87-18.29.1 kernel-docs-4.4.87-18.29.2 kernel-docs-html-4.4.87-18.29.2 kernel-docs-pdf-4.4.87-18.29.2 kernel-macros-4.4.87-18.29.1 kernel-source-4.4.87-18.29.1 kernel-source-vanilla-4.4.87-18.29.1 - openSUSE Leap 42.2 (x86_64): kernel-debug-4.4.87-18.29.1 kernel-debug-base-4.4.87-18.29.1 kernel-debug-base-debuginfo-4.4.87-18.29.1 kernel-debug-debuginfo-4.4.87-18.29.1 kernel-debug-debugsource-4.4.87-18.29.1 kernel-debug-devel-4.4.87-18.29.1 kernel-debug-devel-debuginfo-4.4.87-18.29.1 kernel-default-4.4.87-18.29.1 kernel-default-base-4.4.87-18.29.1 kernel-default-base-debuginfo-4.4.87-18.29.1 kernel-default-debuginfo-4.4.87-18.29.1 kernel-default-debugsource-4.4.87-18.29.1 kernel-default-devel-4.4.87-18.29.1 kernel-obs-build-4.4.87-18.29.1 kernel-obs-build-debugsource-4.4.87-18.29.1 kernel-obs-qa-4.4.87-18.29.1 kernel-syms-4.4.87-18.29.1 kernel-vanilla-4.4.87-18.29.1 kernel-vanilla-base-4.4.87-18.29.1 kernel-vanilla-base-debuginfo-4.4.87-18.29.1 kernel-vanilla-debuginfo-4.4.87-18.29.1 kernel-vanilla-debugsource-4.4.87-18.29.1 kernel-vanilla-devel-4.4.87-18.29.1 References: https://www.suse.com/security/cve/CVE-2017-1000251.html https://www.suse.com/security/cve/CVE-2017-11472.html https://www.suse.com/security/cve/CVE-2017-12134.html https://www.suse.com/security/cve/CVE-2017-14051.html https://www.suse.com/security/cve/CVE-2017-14106.html https://bugzilla.suse.com/1012829 https://bugzilla.suse.com/1020645 https://bugzilla.suse.com/1020657 https://bugzilla.suse.com/1021424 https://bugzilla.suse.com/1022743 https://bugzilla.suse.com/1024405 https://bugzilla.suse.com/1030850 https://bugzilla.suse.com/1031717 https://bugzilla.suse.com/1031784 https://bugzilla.suse.com/1034048 https://bugzilla.suse.com/1038583 https://bugzilla.suse.com/1047487 https://bugzilla.suse.com/1048155 https://bugzilla.suse.com/1048893 https://bugzilla.suse.com/1048934 https://bugzilla.suse.com/1049226 https://bugzilla.suse.com/1049580 https://bugzilla.suse.com/1051790 https://bugzilla.suse.com/1052580 https://bugzilla.suse.com/1052888 https://bugzilla.suse.com/1053117 https://bugzilla.suse.com/1053802 https://bugzilla.suse.com/1053915 https://bugzilla.suse.com/1053919 https://bugzilla.suse.com/1054084 https://bugzilla.suse.com/1055013 https://bugzilla.suse.com/1055096 https://bugzilla.suse.com/1055359 https://bugzilla.suse.com/1056261 https://bugzilla.suse.com/1056588 https://bugzilla.suse.com/1056827 https://bugzilla.suse.com/1056982 https://bugzilla.suse.com/1057015 https://bugzilla.suse.com/1057389 https://bugzilla.suse.com/1058116 https://bugzilla.suse.com/971975 https://bugzilla.suse.com/981309

1 0

openSUSE-SU-2017:2494-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2494-1 Rating: important References: #1012829 #1021424 #1022743 #1024405 #1031717 #1035479 #1036060 #1038583 #1046529 #1048893 #1048912 #1049361 #1049580 #1054654 #1056261 #1056849 #1056982 #1057015 #1057031 #1057035 #1057038 #1057047 #1057067 #1057389 #1057849 #1058116 #971975 #981309 Cross-References: CVE-2017-1000251 CVE-2017-11472 CVE-2017-14106 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves three vulnerabilities and has 25 fixes is now available. Description: The openSUSE Leap 42.3 kernel was updated to 4.4.87 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bnc#1057389). - CVE-2017-14106: The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel allowed local users to cause a denial of service (__tcp_select_window divide-by-zero error and system crash) by triggering a disconnect within a certain tcp_recvmsg code path (bnc#1056982). - CVE-2017-11472: The acpi_ns_terminate() function in drivers/acpi/acpica/nsutils.c in the Linux kernel did not flush the operand cache and causes a kernel stack dump, which allowed local users to obtain sensitive information from kernel memory and bypass the KASLR protection mechanism via a crafted ACPI table (bnc#1049580). The following non-security bugs were fixed: - acpica: IORT: Update SMMU models for revision C (bsc#1036060). - acpi/nfit: Fix memory corruption/Unregister mce decoder on failure (bsc#1057047). - ahci: do not use MSI for devices with the silly Intel NVMe remapping scheme (bsc#1048912). - ahci: thunderx2: stop engine fix update (bsc#1057031). - alsa: hda/realtek - Add support headphone Mic for ALC221 of HP platform (bsc#1024405). - arm64: mm: select CONFIG_ARCH_PROC_KCORE_TEXT (bsc#1046529). - arm64: PCI: Fix struct acpi_pci_root_ops allocation failure path (bsc#1056849). - arm64: Update config files. Enable ARCH_PROC_KCORE_TEXT - blacklist.conf: gcc7 compiler warning (bsc#1056849) - bnxt: add a missing rcu synchronization (bnc#1038583). - bnxt: do not busy-poll when link is down (bnc#1038583). - bnxt_en: Enable MRU enables bit when configuring VNIC MRU (bnc#1038583). - bnxt_en: Fix and clarify link_info->advertising (bnc#1038583). - bnxt_en: Fix a VXLAN vs GENEVE issue (bnc#1038583). - bnxt_en: Fix NULL pointer dereference in a failure path during open (bnc#1038583). - bnxt_en: Fix NULL pointer dereference in reopen failure path (bnc#1038583). - bnxt_en: fix pci cleanup in bnxt_init_one() failure path (bnc#1038583). - bnxt_en: Fix ring arithmetic in bnxt_setup_tc() (bnc#1038583). - bnxt_en: Fix TX push operation on ARM64 (bnc#1038583). - bnxt_en: Fix "uninitialized variable" bug in TPA code path (bnc#1038583). - bnxt_en: Fix VF virtual link state (bnc#1038583). - bnxt_en: initialize rc to zero to avoid returning garbage (bnc#1038583). - bnxt_en: Pad TX packets below 52 bytes (bnc#1038583). - bnxt_en: Refactor TPA code path (bnc#1038583). - ceph: fix readpage from fscache (bsc#1057015). - cifs: add build_path_from_dentry_optional_prefix() (fate#323482). - cifs: add use_ipc flag to SMB2_ioctl() (fate#323482). - cifs: Fix sparse warnings (fate#323482). - cifs: implement get_dfs_refer for SMB2+ (fate#323482). - cifs: let ses->ipc_tid hold smb2 TreeIds (fate#323482). - cifs: move DFS response parsing out of SMB1 code (fate#323482). - cifs: remove any preceding delimiter from prefix_path (fate#323482). - cifs: set signing flag in SMB2+ TreeConnect if needed (fate#323482). - cifs: use DFS pathnames in SMB2+ Create requests (fate#323482). - cpufreq: intel_pstate: Disable energy efficiency optimization (bsc#1054654). - cxgb4: Fix stack out-of-bounds read due to wrong size to t4_record_mbox() (bsc#1021424 bsc#1022743). - device-dax: fix cdev leak (bsc#1057047). - dmaengine: mv_xor_v2: do not use descriptors not acked by async_tx (bsc#1056849). - dmaengine: mv_xor_v2: enable XOR engine after its configuration (bsc#1056849). - dmaengine: mv_xor_v2: fix tx_submit() implementation (bsc#1056849). - dmaengine: mv_xor_v2: handle mv_xor_v2_prep_sw_desc() error properly (bsc#1056849). - dmaengine: mv_xor_v2: properly handle wrapping in the array of HW descriptors (bsc#1056849). - dmaengine: mv_xor_v2: remove interrupt coalescing (bsc#1056849). - dmaengine: mv_xor_v2: set DMA mask to 40 bits (bsc#1056849). - drivers: base: cacheinfo: fix boot error message when acpi is enabled (bsc#1057849). - edac, thunderx: Fix a warning during l2c debugfs node creation (bsc#1057038). - edac, thunderx: Fix error handling path in thunderx_lmc_probe() (bsc#1057038). - fs/proc: kcore: use kcore_list type to check for vmalloc/module address (bsc#1046529). - gfs2: Do not clear SGID when inheriting ACLs (bsc#1012829). - ib/hns: checking for IS_ERR() instead of NULL (bsc#1056849). - ibmvnic: Clean up resources on probe failure (fate#323285, bsc#1058116). - ib/rxe: Add dst_clone() in prepare_ipv6_hdr() (bsc#1049361). - ib/rxe: Avoid ICRC errors by copying into the skb first (bsc#1049361). - ib/rxe: Disable completion upcalls when a CQ is destroyed (bsc#1049361). - ib/rxe: Fix destination cache for IPv6 (bsc#1049361). - ib/rxe: Fix up rxe_qp_cleanup() (bsc#1049361). - ib/rxe: Fix up the responder's find_resources() function (bsc#1049361). - ib/rxe: Handle NETDEV_CHANGE events (bsc#1049361). - ib/rxe: Move refcounting earlier in rxe_send() (bsc#1049361). - ib/rxe: Remove dangling prototype (bsc#1049361). - ib/rxe: Remove unneeded initialization in prepare6() (bsc#1049361). - ib/rxe: Set dma_mask and coherent_dma_mask (bsc#1049361). - iommu/arm-smmu-v3, acpi: Add temporary Cavium SMMU-V3 IORT model number definitions (bsc#1036060). - iommu/arm-smmu-v3: Increase CMDQ drain timeout value (bsc#1035479). Refresh patch to mainline version - irqchip/gic-v3-its: Fix command buffer allocation (bsc#1057067). - iwlwifi: mvm: do not send CTDP commands via debugfs if not supported (bsc#1031717). - kernel/*: switch to memdup_user_nul() (bsc#1048893). - lightnvm: remove unused rq parameter of nvme_nvm_rqtocmd() to kill warning (FATE#319466). - md/raid5: fix a race condition in stripe batch (linux-stable). - mmc: sdhci-xenon: add set_power callback (bsc#1057035). - mmc: sdhci-xenon: Fix the work flow in xenon_remove() (bsc#1057035). - mm/page_alloc.c: apply gfp_allowed_mask before the first allocation attempt (bnc#971975 VM -- git fixes). - mm/vmalloc.c: huge-vmap: fail gracefully on unexpected huge vmap mappings (bsc#1046529). - new helper: memdup_user_nul() (bsc#1048893). - nfs: flush data when locking a file to ensure cache coherence for mmap (bsc#981309). - pci: rockchip: Handle regulator_get_current_limit() failure correctly (bsc#1056849). - pci: rockchip: Use normal register bank for config accessors (bsc#1056849). - pm / Domains: Fix unsafe iteration over modified list of domains (bsc#1056849). - rtnetlink: fix rtnl_vfinfo_size (bsc#1056261). - scsi: hisi_sas: add missing break in switch statement (bsc#1056849). - sysctl: fix lax sysctl_check_table() sanity check (bsc#1048893). - sysctl: fold sysctl_writes_strict checks into helper (bsc#1048893). - sysctl: kdoc'ify sysctl_writes_strict (bsc#1048893). - sysctl: simplify unsigned int support (bsc#1048893). - ubifs: Correctly evict xattr inodes (bsc#1012829). - ubifs: Do not leak kernel memory to the MTD (bsc#1012829). - xfs: fix inobt inode allocation search optimization (bsc#1012829). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1063=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): kernel-devel-4.4.87-25.1 kernel-docs-4.4.87-25.2 kernel-docs-html-4.4.87-25.2 kernel-docs-pdf-4.4.87-25.2 kernel-macros-4.4.87-25.1 kernel-source-4.4.87-25.1 kernel-source-vanilla-4.4.87-25.1 - openSUSE Leap 42.3 (x86_64): kernel-debug-4.4.87-25.1 kernel-debug-base-4.4.87-25.1 kernel-debug-base-debuginfo-4.4.87-25.1 kernel-debug-debuginfo-4.4.87-25.1 kernel-debug-debugsource-4.4.87-25.1 kernel-debug-devel-4.4.87-25.1 kernel-debug-devel-debuginfo-4.4.87-25.1 kernel-default-4.4.87-25.1 kernel-default-base-4.4.87-25.1 kernel-default-base-debuginfo-4.4.87-25.1 kernel-default-debuginfo-4.4.87-25.1 kernel-default-debugsource-4.4.87-25.1 kernel-default-devel-4.4.87-25.1 kernel-obs-build-4.4.87-25.1 kernel-obs-build-debugsource-4.4.87-25.1 kernel-obs-qa-4.4.87-25.1 kernel-syms-4.4.87-25.1 kernel-vanilla-4.4.87-25.1 kernel-vanilla-base-4.4.87-25.1 kernel-vanilla-base-debuginfo-4.4.87-25.1 kernel-vanilla-debuginfo-4.4.87-25.1 kernel-vanilla-debugsource-4.4.87-25.1 kernel-vanilla-devel-4.4.87-25.1 References: https://www.suse.com/security/cve/CVE-2017-1000251.html https://www.suse.com/security/cve/CVE-2017-11472.html https://www.suse.com/security/cve/CVE-2017-14106.html https://bugzilla.suse.com/1012829 https://bugzilla.suse.com/1021424 https://bugzilla.suse.com/1022743 https://bugzilla.suse.com/1024405 https://bugzilla.suse.com/1031717 https://bugzilla.suse.com/1035479 https://bugzilla.suse.com/1036060 https://bugzilla.suse.com/1038583 https://bugzilla.suse.com/1046529 https://bugzilla.suse.com/1048893 https://bugzilla.suse.com/1048912 https://bugzilla.suse.com/1049361 https://bugzilla.suse.com/1049580 https://bugzilla.suse.com/1054654 https://bugzilla.suse.com/1056261 https://bugzilla.suse.com/1056849 https://bugzilla.suse.com/1056982 https://bugzilla.suse.com/1057015 https://bugzilla.suse.com/1057031 https://bugzilla.suse.com/1057035 https://bugzilla.suse.com/1057038 https://bugzilla.suse.com/1057047 https://bugzilla.suse.com/1057067 https://bugzilla.suse.com/1057389 https://bugzilla.suse.com/1057849 https://bugzilla.suse.com/1058116 https://bugzilla.suse.com/971975 https://bugzilla.suse.com/981309

1 0

openSUSE-RU-2017:2493-1: Recommended update for yast2-ca-management
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for yast2-ca-management ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2493-1 Rating: low References: #1051538 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for yast2-ca-management fixes parsing of URL values in parameters such as "caIssuers" from openssl.cnf. This update was imported from the SUSE:SLE-12-SP2:Update and SUSE:SLE-12-SP2:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1065=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1065=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): yast2-ca-management-3.2.1-5.1 - openSUSE Leap 42.2 (noarch): yast2-ca-management-3.1.10-2.3.1 References: https://bugzilla.suse.com/1051538

1 0

openSUSE-RU-2017:2492-1: Recommended update for iproute2
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for iproute2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2492-1 Rating: low References: #1034855 #1045399 #1056261 #990635 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for iproute2 provides the following fixes: - Fix command line parser in routel command preventing it from entering in an infinite loop. (bsc#1034855) - Do not truncate the output of 'ip addr' on systems with a large number of VFs. (bsc#1045399, bsc#1056261) - Clarify the meaning of "priority" in ip-rule(8) and ip-route(8) manual pages. (bsc#990635) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1052=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1052=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): iproute2-4.4-6.1 iproute2-debuginfo-4.4-6.1 iproute2-debugsource-4.4-6.1 libnetlink-devel-4.4-6.1 - openSUSE Leap 42.3 (noarch): iproute2-doc-4.4-6.1 - openSUSE Leap 42.2 (i586 x86_64): iproute2-4.4-3.4.1 iproute2-debuginfo-4.4-3.4.1 iproute2-debugsource-4.4-3.4.1 libnetlink-devel-4.4-3.4.1 - openSUSE Leap 42.2 (noarch): iproute2-doc-4.4-3.4.1 References: https://bugzilla.suse.com/1034855 https://bugzilla.suse.com/1045399 https://bugzilla.suse.com/1056261 https://bugzilla.suse.com/990635

1 0

openSUSE-SU-2017:2491-1: important: Security update for chromium
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for chromium ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2491-1 Rating: important References: #1057364 Cross-References: CVE-2017-5111 CVE-2017-5112 CVE-2017-5113 CVE-2017-5114 CVE-2017-5115 CVE-2017-5116 CVE-2017-5117 CVE-2017-5118 CVE-2017-5119 CVE-2017-5120 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for chromium to version 61.0.3163.79 fixes several issues. These security issues were fixed: - CVE-2017-5111: Use after free in PDFium (boo#1057364). - CVE-2017-5112: Heap buffer overflow in WebGL (boo#1057364). - CVE-2017-5113: Heap buffer overflow in Skia (boo#1057364). - CVE-2017-5114: Memory lifecycle issue in PDFium (boo#1057364). - CVE-2017-5115: Type confusion in V8 (boo#1057364). - CVE-2017-5116: Type confusion in V8 (boo#1057364). - CVE-2017-5117: Use of uninitialized value in Skia (boo#1057364). - CVE-2017-5118: Bypass of Content Security Policy in Blink (boo#1057364). - CVE-2017-5119: Use of uninitialized value in Skia (boo#1057364). - CVE-2017-5120: Potential HTTPS downgrade during redirect navigation (boo#1057364). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1047=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1047=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): chromedriver-61.0.3163.79-110.1 chromedriver-debuginfo-61.0.3163.79-110.1 chromium-61.0.3163.79-110.1 chromium-debuginfo-61.0.3163.79-110.1 chromium-debugsource-61.0.3163.79-110.1 - openSUSE Leap 42.2 (x86_64): chromedriver-61.0.3163.79-104.24.1 chromedriver-debuginfo-61.0.3163.79-104.24.1 chromium-61.0.3163.79-104.24.1 chromium-debuginfo-61.0.3163.79-104.24.1 chromium-debugsource-61.0.3163.79-104.24.1 References: https://www.suse.com/security/cve/CVE-2017-5111.html https://www.suse.com/security/cve/CVE-2017-5112.html https://www.suse.com/security/cve/CVE-2017-5113.html https://www.suse.com/security/cve/CVE-2017-5114.html https://www.suse.com/security/cve/CVE-2017-5115.html https://www.suse.com/security/cve/CVE-2017-5116.html https://www.suse.com/security/cve/CVE-2017-5117.html https://www.suse.com/security/cve/CVE-2017-5118.html https://www.suse.com/security/cve/CVE-2017-5119.html https://www.suse.com/security/cve/CVE-2017-5120.html https://bugzilla.suse.com/1057364

1 0

openSUSE-RU-2017:2490-1: moderate: Recommended update for avrdude
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for avrdude ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2490-1 Rating: moderate References: #1049593 #994883 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for avrdude contains the following fixes: - limit avrdude to USB by dropping parport from 50-avrdude.rules (boo#994883, boo#1049593) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1051=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1051=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): avrdude-6.1-8.1 avrdude-debuginfo-6.1-8.1 avrdude-debugsource-6.1-8.1 - openSUSE Leap 42.2 (x86_64): avrdude-6.1-5.4.1 avrdude-debuginfo-6.1-5.4.1 avrdude-debugsource-6.1-5.4.1 References: https://bugzilla.suse.com/1049593 https://bugzilla.suse.com/994883

1 0

openSUSE-RU-2017:2489-1: important: Recommended update for tigervnc
by maintenance＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Recommended Update: Recommended update for tigervnc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2489-1 Rating: important References: #1054300 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tigervnc fixes the following issues: - prevent port scanner from putting Xvnc into a high CPU utilization state (bsc#1054300) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1057=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libXvnc-devel-1.6.0-16.17.1 libXvnc1-1.6.0-16.17.1 libXvnc1-debuginfo-1.6.0-16.17.1 tigervnc-1.6.0-16.17.1 tigervnc-debuginfo-1.6.0-16.17.1 tigervnc-debugsource-1.6.0-16.17.1 xorg-x11-Xvnc-1.6.0-16.17.1 xorg-x11-Xvnc-debuginfo-1.6.0-16.17.1 References: https://bugzilla.suse.com/1054300

1 0

openSUSE-SU-2017:2488-1: moderate: Security update for libreoffice
by opensuse-security＠opensuse.org 15 Sep '17

15 Sep '17

openSUSE Security Update: Security update for libreoffice ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2488-1 Rating: moderate References: #1015115 #1015118 #1015360 #1017925 #1021369 #1021373 #1021675 #1028817 #1034192 #1034329 #1034568 #1035087 #1035589 #1036975 #1042828 #1045339 #947117 #948058 #954776 #959926 #962777 #963436 #972777 #975283 #976831 #989564 Cross-References: CVE-2015-8947 CVE-2016-10327 CVE-2016-2052 CVE-2017-7870 CVE-2017-7882 CVE-2017-8358 CVE-2017-9433 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has 19 fixes is now available. Description: LibreOffice was updated to version 5.3.5.2, bringing new features and enhancements: Writer: - New "Go to Page" dialog for quickly jumping to another page. - Support for "Table Styles". - New drawing tools were added. - Improvements in the toolbar. - Borderless padding is displayed. Calc: - New drawing tools were added. - In new installations the default setting for new documents is now "Enable wildcards in formulas" instead of regular expressions. - Improved compatibility with ODF 1.2 Impress: - Images inserted via "Photo Album" can now be linked instead of embedded in the document. - When launching Impress, a Template Selector allows you to choose a Template to start with. - Two new default templates: Vivid and Pencil. - All existing templates have been improved. Draw: - New arrow endings, including Crow's foot notation's ones. Base: - Firebird has been upgraded to version 3.0.0. It is unable to read back Firebird 2.5 data, so embedded Firebird odb files created in LibreOffice version up to 5.2 cannot be opened with LibreOffice 5.3. Some security issues have also been fixed: - CVE-2017-7870: An out-of-bounds write caused by a heap-based buffer overflow related to the tools::Polygon::Insert function. - CVE-2017-7882: An out-of-bounds write related to the HWPFile::TagsRead function. - CVE-2017-8358: an out-of-bounds write caused by a heap-based buffer overflow related to the ReadJPEG function. - CVE-2016-10327: An out-of-bounds write caused by a heap-based buffer overflow related to the EnhWMFReader::ReadEnhWMF function. - CVE-2017-9433: An out-of-bounds write caused by a heap-based buffer overflow related to the MsWrd1Parser::readFootnoteCorrespondance function in libmwaw. A comprehensive list of new features and changes in this release is available at: https://wiki.documentfoundation.org/ReleaseNotes/5.3 This update contains binaries for the ports architectures only. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-1048=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-1048=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): libreoffice-5.3.5.2-3.4 libreoffice-base-5.3.5.2-3.4 libreoffice-base-debuginfo-5.3.5.2-3.4 libreoffice-base-drivers-mysql-5.3.5.2-3.4 libreoffice-base-drivers-mysql-debuginfo-5.3.5.2-3.4 libreoffice-base-drivers-postgresql-5.3.5.2-3.4 libreoffice-base-drivers-postgresql-debuginfo-5.3.5.2-3.4 libreoffice-calc-5.3.5.2-3.4 libreoffice-calc-debuginfo-5.3.5.2-3.4 libreoffice-calc-extensions-5.3.5.2-3.4 libreoffice-debuginfo-5.3.5.2-3.4 libreoffice-debugsource-5.3.5.2-3.4 libreoffice-draw-5.3.5.2-3.4 libreoffice-draw-debuginfo-5.3.5.2-3.4 libreoffice-filters-optional-5.3.5.2-3.4 libreoffice-gnome-5.3.5.2-3.4 libreoffice-gnome-debuginfo-5.3.5.2-3.4 libreoffice-gtk3-5.3.5.2-3.4 libreoffice-gtk3-debuginfo-5.3.5.2-3.4 libreoffice-impress-5.3.5.2-3.4 libreoffice-impress-debuginfo-5.3.5.2-3.4 libreoffice-kde4-5.3.5.2-3.4 libreoffice-kde4-debuginfo-5.3.5.2-3.4 libreoffice-mailmerge-5.3.5.2-3.4 libreoffice-math-5.3.5.2-3.4 libreoffice-math-debuginfo-5.3.5.2-3.4 libreoffice-officebean-5.3.5.2-3.4 libreoffice-officebean-debuginfo-5.3.5.2-3.4 libreoffice-pyuno-5.3.5.2-3.4 libreoffice-pyuno-debuginfo-5.3.5.2-3.4 libreoffice-sdk-5.3.5.2-3.4 libreoffice-sdk-debuginfo-5.3.5.2-3.4 libreoffice-sdk-doc-5.3.5.2-3.4 libreoffice-writer-5.3.5.2-3.4 libreoffice-writer-debuginfo-5.3.5.2-3.4 libreoffice-writer-extensions-5.3.5.2-3.4 libreofficekit-5.3.5.2-3.4 libreofficekit-devel-5.3.5.2-3.4 - openSUSE Leap 42.3 (noarch): libreoffice-branding-upstream-5.3.5.2-3.4 libreoffice-gdb-pretty-printers-5.3.5.2-3.4 libreoffice-glade-5.3.5.2-3.4 libreoffice-icon-theme-breeze-5.3.5.2-3.4 libreoffice-icon-theme-galaxy-5.3.5.2-3.4 libreoffice-icon-theme-hicontrast-5.3.5.2-3.4 libreoffice-icon-theme-oxygen-5.3.5.2-3.4 libreoffice-icon-theme-sifr-5.3.5.2-3.4 libreoffice-icon-theme-tango-5.3.5.2-3.4 libreoffice-l10n-af-5.3.5.2-3.4 libreoffice-l10n-ar-5.3.5.2-3.4 libreoffice-l10n-as-5.3.5.2-3.4 libreoffice-l10n-bg-5.3.5.2-3.4 libreoffice-l10n-bn-5.3.5.2-3.4 libreoffice-l10n-br-5.3.5.2-3.4 libreoffice-l10n-ca-5.3.5.2-3.4 libreoffice-l10n-cs-5.3.5.2-3.4 libreoffice-l10n-cy-5.3.5.2-3.4 libreoffice-l10n-da-5.3.5.2-3.4 libreoffice-l10n-de-5.3.5.2-3.4 libreoffice-l10n-dz-5.3.5.2-3.4 libreoffice-l10n-el-5.3.5.2-3.4 libreoffice-l10n-en-5.3.5.2-3.4 libreoffice-l10n-es-5.3.5.2-3.4 libreoffice-l10n-et-5.3.5.2-3.4 libreoffice-l10n-eu-5.3.5.2-3.4 libreoffice-l10n-fa-5.3.5.2-3.4 libreoffice-l10n-fi-5.3.5.2-3.4 libreoffice-l10n-fr-5.3.5.2-3.4 libreoffice-l10n-ga-5.3.5.2-3.4 libreoffice-l10n-gl-5.3.5.2-3.4 libreoffice-l10n-gu-5.3.5.2-3.4 libreoffice-l10n-he-5.3.5.2-3.4 libreoffice-l10n-hi-5.3.5.2-3.4 libreoffice-l10n-hr-5.3.5.2-3.4 libreoffice-l10n-hu-5.3.5.2-3.4 libreoffice-l10n-it-5.3.5.2-3.4 libreoffice-l10n-ja-5.3.5.2-3.4 libreoffice-l10n-kk-5.3.5.2-3.4 libreoffice-l10n-kn-5.3.5.2-3.4 libreoffice-l10n-ko-5.3.5.2-3.4 libreoffice-l10n-lt-5.3.5.2-3.4 libreoffice-l10n-lv-5.3.5.2-3.4 libreoffice-l10n-mai-5.3.5.2-3.4 libreoffice-l10n-ml-5.3.5.2-3.4 libreoffice-l10n-mr-5.3.5.2-3.4 libreoffice-l10n-nb-5.3.5.2-3.4 libreoffice-l10n-nl-5.3.5.2-3.4 libreoffice-l10n-nn-5.3.5.2-3.4 libreoffice-l10n-nr-5.3.5.2-3.4 libreoffice-l10n-nso-5.3.5.2-3.4 libreoffice-l10n-or-5.3.5.2-3.4 libreoffice-l10n-pa-5.3.5.2-3.4 libreoffice-l10n-pl-5.3.5.2-3.4 libreoffice-l10n-pt_BR-5.3.5.2-3.4 libreoffice-l10n-pt_PT-5.3.5.2-3.4 libreoffice-l10n-ro-5.3.5.2-3.4 libreoffice-l10n-ru-5.3.5.2-3.4 libreoffice-l10n-si-5.3.5.2-3.4 libreoffice-l10n-sk-5.3.5.2-3.4 libreoffice-l10n-sl-5.3.5.2-3.4 libreoffice-l10n-sr-5.3.5.2-3.4 libreoffice-l10n-ss-5.3.5.2-3.4 libreoffice-l10n-st-5.3.5.2-3.4 libreoffice-l10n-sv-5.3.5.2-3.4 libreoffice-l10n-ta-5.3.5.2-3.4 libreoffice-l10n-te-5.3.5.2-3.4 libreoffice-l10n-th-5.3.5.2-3.4 libreoffice-l10n-tn-5.3.5.2-3.4 libreoffice-l10n-tr-5.3.5.2-3.4 libreoffice-l10n-ts-5.3.5.2-3.4 libreoffice-l10n-uk-5.3.5.2-3.4 libreoffice-l10n-ve-5.3.5.2-3.4 libreoffice-l10n-xh-5.3.5.2-3.4 libreoffice-l10n-zh_CN-5.3.5.2-3.4 libreoffice-l10n-zh_TW-5.3.5.2-3.4 libreoffice-l10n-zu-5.3.5.2-3.4 - openSUSE Leap 42.2 (x86_64): libreoffice-5.3.5.2-18.9.4 libreoffice-base-5.3.5.2-18.9.4 libreoffice-base-debuginfo-5.3.5.2-18.9.4 libreoffice-base-drivers-mysql-5.3.5.2-18.9.4 libreoffice-base-drivers-mysql-debuginfo-5.3.5.2-18.9.4 libreoffice-base-drivers-postgresql-5.3.5.2-18.9.4 libreoffice-base-drivers-postgresql-debuginfo-5.3.5.2-18.9.4 libreoffice-calc-5.3.5.2-18.9.4 libreoffice-calc-debuginfo-5.3.5.2-18.9.4 libreoffice-calc-extensions-5.3.5.2-18.9.4 libreoffice-debuginfo-5.3.5.2-18.9.4 libreoffice-debugsource-5.3.5.2-18.9.4 libreoffice-draw-5.3.5.2-18.9.4 libreoffice-draw-debuginfo-5.3.5.2-18.9.4 libreoffice-filters-optional-5.3.5.2-18.9.4 libreoffice-gnome-5.3.5.2-18.9.4 libreoffice-gnome-debuginfo-5.3.5.2-18.9.4 libreoffice-gtk3-5.3.5.2-18.9.4 libreoffice-gtk3-debuginfo-5.3.5.2-18.9.4 libreoffice-impress-5.3.5.2-18.9.4 libreoffice-impress-debuginfo-5.3.5.2-18.9.4 libreoffice-kde4-5.3.5.2-18.9.4 libreoffice-kde4-debuginfo-5.3.5.2-18.9.4 libreoffice-mailmerge-5.3.5.2-18.9.4 libreoffice-math-5.3.5.2-18.9.4 libreoffice-math-debuginfo-5.3.5.2-18.9.4 libreoffice-officebean-5.3.5.2-18.9.4 libreoffice-officebean-debuginfo-5.3.5.2-18.9.4 libreoffice-pyuno-5.3.5.2-18.9.4 libreoffice-pyuno-debuginfo-5.3.5.2-18.9.4 libreoffice-sdk-5.3.5.2-18.9.4 libreoffice-sdk-debuginfo-5.3.5.2-18.9.4 libreoffice-sdk-doc-5.3.5.2-18.9.4 libreoffice-writer-5.3.5.2-18.9.4 libreoffice-writer-debuginfo-5.3.5.2-18.9.4 libreoffice-writer-extensions-5.3.5.2-18.9.4 libreofficekit-5.3.5.2-18.9.4 libreofficekit-devel-5.3.5.2-18.9.4 - openSUSE Leap 42.2 (noarch): libreoffice-branding-upstream-5.3.5.2-18.9.4 libreoffice-gdb-pretty-printers-5.3.5.2-18.9.4 libreoffice-glade-5.3.5.2-18.9.4 libreoffice-icon-theme-breeze-5.3.5.2-18.9.4 libreoffice-icon-theme-galaxy-5.3.5.2-18.9.4 libreoffice-icon-theme-hicontrast-5.3.5.2-18.9.4 libreoffice-icon-theme-oxygen-5.3.5.2-18.9.4 libreoffice-icon-theme-sifr-5.3.5.2-18.9.4 libreoffice-icon-theme-tango-5.3.5.2-18.9.4 libreoffice-l10n-af-5.3.5.2-18.9.4 libreoffice-l10n-ar-5.3.5.2-18.9.4 libreoffice-l10n-as-5.3.5.2-18.9.4 libreoffice-l10n-bg-5.3.5.2-18.9.4 libreoffice-l10n-bn-5.3.5.2-18.9.4 libreoffice-l10n-br-5.3.5.2-18.9.4 libreoffice-l10n-ca-5.3.5.2-18.9.4 libreoffice-l10n-cs-5.3.5.2-18.9.4 libreoffice-l10n-cy-5.3.5.2-18.9.4 libreoffice-l10n-da-5.3.5.2-18.9.4 libreoffice-l10n-de-5.3.5.2-18.9.4 libreoffice-l10n-dz-5.3.5.2-18.9.4 libreoffice-l10n-el-5.3.5.2-18.9.4 libreoffice-l10n-en-5.3.5.2-18.9.4 libreoffice-l10n-es-5.3.5.2-18.9.4 libreoffice-l10n-et-5.3.5.2-18.9.4 libreoffice-l10n-eu-5.3.5.2-18.9.4 libreoffice-l10n-fa-5.3.5.2-18.9.4 libreoffice-l10n-fi-5.3.5.2-18.9.4 libreoffice-l10n-fr-5.3.5.2-18.9.4 libreoffice-l10n-ga-5.3.5.2-18.9.4 libreoffice-l10n-gl-5.3.5.2-18.9.4 libreoffice-l10n-gu-5.3.5.2-18.9.4 libreoffice-l10n-he-5.3.5.2-18.9.4 libreoffice-l10n-hi-5.3.5.2-18.9.4 libreoffice-l10n-hr-5.3.5.2-18.9.4 libreoffice-l10n-hu-5.3.5.2-18.9.4 libreoffice-l10n-it-5.3.5.2-18.9.4 libreoffice-l10n-ja-5.3.5.2-18.9.4 libreoffice-l10n-kk-5.3.5.2-18.9.4 libreoffice-l10n-kn-5.3.5.2-18.9.4 libreoffice-l10n-ko-5.3.5.2-18.9.4 libreoffice-l10n-lt-5.3.5.2-18.9.4 libreoffice-l10n-lv-5.3.5.2-18.9.4 libreoffice-l10n-mai-5.3.5.2-18.9.4 libreoffice-l10n-ml-5.3.5.2-18.9.4 libreoffice-l10n-mr-5.3.5.2-18.9.4 libreoffice-l10n-nb-5.3.5.2-18.9.4 libreoffice-l10n-nl-5.3.5.2-18.9.4 libreoffice-l10n-nn-5.3.5.2-18.9.4 libreoffice-l10n-nr-5.3.5.2-18.9.4 libreoffice-l10n-nso-5.3.5.2-18.9.4 libreoffice-l10n-or-5.3.5.2-18.9.4 libreoffice-l10n-pa-5.3.5.2-18.9.4 libreoffice-l10n-pl-5.3.5.2-18.9.4 libreoffice-l10n-pt_BR-5.3.5.2-18.9.4 libreoffice-l10n-pt_PT-5.3.5.2-18.9.4 libreoffice-l10n-ro-5.3.5.2-18.9.4 libreoffice-l10n-ru-5.3.5.2-18.9.4 libreoffice-l10n-si-5.3.5.2-18.9.4 libreoffice-l10n-sk-5.3.5.2-18.9.4 libreoffice-l10n-sl-5.3.5.2-18.9.4 libreoffice-l10n-sr-5.3.5.2-18.9.4 libreoffice-l10n-ss-5.3.5.2-18.9.4 libreoffice-l10n-st-5.3.5.2-18.9.4 libreoffice-l10n-sv-5.3.5.2-18.9.4 libreoffice-l10n-ta-5.3.5.2-18.9.4 libreoffice-l10n-te-5.3.5.2-18.9.4 libreoffice-l10n-th-5.3.5.2-18.9.4 libreoffice-l10n-tn-5.3.5.2-18.9.4 libreoffice-l10n-tr-5.3.5.2-18.9.4 libreoffice-l10n-ts-5.3.5.2-18.9.4 libreoffice-l10n-uk-5.3.5.2-18.9.4 libreoffice-l10n-ve-5.3.5.2-18.9.4 libreoffice-l10n-xh-5.3.5.2-18.9.4 libreoffice-l10n-zh_CN-5.3.5.2-18.9.4 libreoffice-l10n-zh_TW-5.3.5.2-18.9.4 libreoffice-l10n-zu-5.3.5.2-18.9.4 References: https://www.suse.com/security/cve/CVE-2015-8947.html https://www.suse.com/security/cve/CVE-2016-10327.html https://www.suse.com/security/cve/CVE-2016-2052.html https://www.suse.com/security/cve/CVE-2017-7870.html https://www.suse.com/security/cve/CVE-2017-7882.html https://www.suse.com/security/cve/CVE-2017-8358.html https://www.suse.com/security/cve/CVE-2017-9433.html https://bugzilla.suse.com/1015115 https://bugzilla.suse.com/1015118 https://bugzilla.suse.com/1015360 https://bugzilla.suse.com/1017925 https://bugzilla.suse.com/1021369 https://bugzilla.suse.com/1021373 https://bugzilla.suse.com/1021675 https://bugzilla.suse.com/1028817 https://bugzilla.suse.com/1034192 https://bugzilla.suse.com/1034329 https://bugzilla.suse.com/1034568 https://bugzilla.suse.com/1035087 https://bugzilla.suse.com/1035589 https://bugzilla.suse.com/1036975 https://bugzilla.suse.com/1042828 https://bugzilla.suse.com/1045339 https://bugzilla.suse.com/947117 https://bugzilla.suse.com/948058 https://bugzilla.suse.com/954776 https://bugzilla.suse.com/959926 https://bugzilla.suse.com/962777 https://bugzilla.suse.com/963436 https://bugzilla.suse.com/972777 https://bugzilla.suse.com/975283 https://bugzilla.suse.com/976831 https://bugzilla.suse.com/989564

1 0