November 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2951-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 30 Nov '16

30 Nov '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2951-1 Rating: moderate References: #1011570 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Prevent crash when unplugging display-link device. (boo#1011570) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-4.1 xorg-x11-server-debuginfo-7.6_1.18.3-4.1 xorg-x11-server-debugsource-7.6_1.18.3-4.1 xorg-x11-server-extra-7.6_1.18.3-4.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-4.1 xorg-x11-server-sdk-7.6_1.18.3-4.1 xorg-x11-server-source-7.6_1.18.3-4.1 References: https://bugzilla.suse.com/1011570

1 0

openSUSE-RU-2016:2950-1: moderate: Recommended update for krusader
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for krusader ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2950-1 Rating: moderate References: #1011320 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for krusader fixes the following issues: - Dolphin would open documents, such as LibreOffice files, as archives (boo#1011320) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1371=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kio_iso-2.5.0-3.1 kio_iso-debuginfo-2.5.0-3.1 krusader-2.5.0-3.1 krusader-debuginfo-2.5.0-3.1 krusader-debugsource-2.5.0-3.1 krusader-doc-2.5.0-3.1 References: https://bugzilla.suse.com/1011320

1 0

openSUSE-RU-2016:2949-1: important: Recommended update for NetworkManager-gnome, gnome-control-center
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for NetworkManager-gnome, gnome-control-center ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2949-1 Rating: important References: #1003069 #870795 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for NetworkManager-gnome and gnome-control-center provides the following fixes: - Ensure secrets default to agent-owned and are consequently stored in the encrypted keyring. (bsc#1003069) - Fix created mobile networks not showing in the network list. (bsc#870795) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1367=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): NetworkManager-appindicator-1.0.10-10.1 NetworkManager-appindicator-debuginfo-1.0.10-10.1 NetworkManager-appindicator-debugsource-1.0.10-10.1 NetworkManager-connection-editor-1.0.10-10.1 NetworkManager-connection-editor-debuginfo-1.0.10-10.1 NetworkManager-gnome-1.0.10-10.1 NetworkManager-gnome-debuginfo-1.0.10-10.1 NetworkManager-gnome-debugsource-1.0.10-10.1 libnm-gtk-devel-1.0.10-10.1 libnm-gtk0-1.0.10-10.1 libnm-gtk0-debuginfo-1.0.10-10.1 typelib-1_0-NMGtk-1_0-1.0.10-10.1 - openSUSE Leap 42.2 (x86_64): gnome-control-center-3.20.1-9.1 gnome-control-center-color-3.20.1-9.1 gnome-control-center-debuginfo-3.20.1-9.1 gnome-control-center-debugsource-3.20.1-9.1 gnome-control-center-devel-3.20.1-9.1 gnome-control-center-goa-3.20.1-9.1 gnome-control-center-user-faces-3.20.1-9.1 - openSUSE Leap 42.2 (noarch): NetworkManager-gnome-lang-1.0.10-10.1 gnome-control-center-lang-3.20.1-9.1 References: https://bugzilla.suse.com/1003069 https://bugzilla.suse.com/870795

1 0

openSUSE-RU-2016:2948-1: important: Recommended update for ghostscript
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2948-1 Rating: important References: #1006592 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ghostscript fixes the following issues: - Fix a regression introduced with the latest update for CVE-2013-5653 by which ps files couldn't be opened in okular/evince. (boo#1006592, kde#371887) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1370=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ghostscript-9.15-9.1 ghostscript-debuginfo-9.15-9.1 ghostscript-debugsource-9.15-9.1 ghostscript-devel-9.15-9.1 ghostscript-mini-9.15-9.1 ghostscript-mini-debuginfo-9.15-9.1 ghostscript-mini-debugsource-9.15-9.1 ghostscript-mini-devel-9.15-9.1 ghostscript-x11-9.15-9.1 ghostscript-x11-debuginfo-9.15-9.1 References: https://bugzilla.suse.com/1006592

1 0

openSUSE-RU-2016:2947-1: moderate: Recommended update for exmh
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for exmh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2947-1 Rating: moderate References: #967510 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for exmh fixes the following issues: - the exmh script did not work as it was looking for the wrong version (boo#967510) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1369=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1369=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): exmh-2.8.0-6.1 - openSUSE Leap 42.1 (noarch): exmh-2.8.0-5.1 References: https://bugzilla.suse.com/967510

1 0

openSUSE-RU-2016:2946-1: Recommended update for sssd
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2946-1 Rating: low References: #1004220 #993582 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sssd provides the following fixes: - Prevent crashes of statically linked binaries using getpwuid when sssd is used and nscd is turned off or has caching disabled. (bsc#993582) - Install logrotate configuration. (bsc#1004220) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1368=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libipa_hbac-devel-1.13.4-3.1 libipa_hbac0-1.13.4-3.1 libipa_hbac0-debuginfo-1.13.4-3.1 libsss_idmap-devel-1.13.4-3.1 libsss_idmap0-1.13.4-3.1 libsss_idmap0-debuginfo-1.13.4-3.1 libsss_nss_idmap-devel-1.13.4-3.1 libsss_nss_idmap0-1.13.4-3.1 libsss_nss_idmap0-debuginfo-1.13.4-3.1 libsss_sudo-1.13.4-3.1 libsss_sudo-debuginfo-1.13.4-3.1 python-ipa_hbac-1.13.4-3.1 python-ipa_hbac-debuginfo-1.13.4-3.1 python-sss_nss_idmap-1.13.4-3.1 python-sss_nss_idmap-debuginfo-1.13.4-3.1 python-sssd-config-1.13.4-3.1 python-sssd-config-debuginfo-1.13.4-3.1 sssd-1.13.4-3.1 sssd-ad-1.13.4-3.1 sssd-ad-debuginfo-1.13.4-3.1 sssd-debuginfo-1.13.4-3.1 sssd-debugsource-1.13.4-3.1 sssd-ipa-1.13.4-3.1 sssd-ipa-debuginfo-1.13.4-3.1 sssd-krb5-1.13.4-3.1 sssd-krb5-common-1.13.4-3.1 sssd-krb5-common-debuginfo-1.13.4-3.1 sssd-krb5-debuginfo-1.13.4-3.1 sssd-ldap-1.13.4-3.1 sssd-ldap-debuginfo-1.13.4-3.1 sssd-proxy-1.13.4-3.1 sssd-proxy-debuginfo-1.13.4-3.1 sssd-tools-1.13.4-3.1 sssd-tools-debuginfo-1.13.4-3.1 - openSUSE Leap 42.2 (x86_64): sssd-32bit-1.13.4-3.1 sssd-debuginfo-32bit-1.13.4-3.1 References: https://bugzilla.suse.com/1004220 https://bugzilla.suse.com/993582

1 0

openSUSE-RU-2016:2944-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2944-1 Rating: moderate References: #1004321 #997079 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for xdg-utils fixes the following issues: - boo#997079: xdg-open inserted backslashes on LXDE - boo#1004321: unable to set default browser with xdg-settings Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 5204=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): xdg-utils-20150119-6.1 References: https://bugzilla.suse.com/1004321 https://bugzilla.suse.com/997079

1 0

openSUSE-RU-2016:2939-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2939-1 Rating: moderate References: #959912 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdg-utils fixes the following issues: - boo#959912: xdg-su did not recognize LXQt session, add LXQt support The following changes are also included: - xdg-mime: support for KDE Frameworks 5.6 - xdg-mime does not write the file it reads in a query (BR95051) - xdg-screensaver: Add cinnamon-screensaver D-Bus API support. - xdg-open: standardize output redirection style Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch 5201=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): xdg-utils-20160610-3.1 References: https://bugzilla.suse.com/959912

1 0

openSUSE-RU-2016:2937-1: moderate: Recommended update for xdg-utils
by maintenance＠opensuse.org 29 Nov '16

29 Nov '16

openSUSE Recommended Update: Recommended update for xdg-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2937-1 Rating: moderate References: #1004321 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xdg-utils fixes the following issues: - boo#1004321: unable to set default browser with xdg-settings Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch 5211=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): xdg-utils-20140922-21.1 References: https://bugzilla.suse.com/1004321

1 0

openSUSE-SU-2016:2935-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 28 Nov '16

28 Nov '16

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2935-1 Rating: moderate References: #1005621 Cross-References: CVE-2016-5501 CVE-2016-5538 CVE-2016-5605 CVE-2016-5608 CVE-2016-5610 CVE-2016-5611 CVE-2016-5613 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: - Fixes CVE-2016-5501,CVE-2016-5538,CVE-2016-5605,CVE-2016-5608,CVE-2016-5610,CVE-2 016-5611,CVE-2016-5613 (bsc#1005621) - Add patch to limit number of simultaneous make jobs. - Version bump to 5.1.8 (released 2016-10-18 by Oracle) This is a maintenance release. The following items were fixed and/or added: GUI: fixed keyboard shortcut handling regressions (Mac OS X hosts only; bugs #15937 and #15938) GUI: fixed keyboard handling regression for separate UI (Windows hosts only; bugs #15928) NAT: don't exceed the maximum number of "search" suffixes. Patch from bug #15948. NAT: fixed parsing of port-forwarding rules with a name which contains a slash (bug #16002) NAT Network: when the host has only loopback nameserver that cannot be mapped to the guests (e.g. dnsmasq running on 127.0.1.1), make DHCP supply NAT Network DNS proxy as nameserver. Bridged Network: prevent flooding syslog with packet allocation error messages (bug #15569) Audio: now using Audio Queues on Mac OS X hosts Audio: fixed recording with the PulseAudio backend (5.1 regression) Audio: various bugfixes Snapshots: fixed regression in 5.1.4 for deleting snapshots with several disks (bug #15831) Snapshots: crash fix and better error reporting when snapshot deletion failed Storage: some fixes for the NVMe emulation with Windows guests API: fixed initialization of SAS controllers (bug #15972) Build system: make it possible to build VBox on systems which default to Python 3 Windows Additions / VGA: if the guest's power management turns a virtual screen off, blank the corresponding VM window rather than hide the window Windows Additions: fixed a generic bug which could lead to freezing shared folders (bug #15662) Linux hosts / guests: fix for kernels with CONFIG_CPUMASK_OFFSTACK set (bug #16020) Linux Additions: don't require all virtual consoles be in text mode. This should fix cases when the guest is booted with a graphical boot screen (bug #15683) Linux Additions: added depmod overrides for the vboxguest and vboxsf kernel modules to fix conflicts with modules shipped by certain Linux distributions X11 Additions: disable 3D on the guest if the host does not provide enough capabilities (bug #15860) - Builds keep running out of memory when building the web server part of the package. To help the memory pressure, I have forced make to run with "-j2", rather than use the number of processors. Such a change will slow the build, but will result in a higher rate of success. - Increase memory allowed in build to 10000 MB. - Remove file "fix_removal_of_DEFINE_PCI_DEVICE_TABLE" - fixed upstream. - Version bump to 5.1.6 (released 2016-09-12 by Oracle) This is a maintenance release. The following items were fixed and/or added: GUI: fixed issue with opening '.vbox' files and it's aliases GUI: keyboard grabbing fixes (bugs #15771 and #15745) GUI: fix for passing through Ctrl + mouse-click (Mac OS X hosts only; bug #15714) GUI: fixed automatic deletion of extension pack files (bugs #11352 and #14742) USB: fixed showing unknown device instead of the manufacturer or product description under certain circumstances (5.1.0 regression; bug #15764) XHCI: another fix for a hanging guest under certain conditions as result of the fix for bug #15747, this time for Windows 7 guests Serial: fixed high CPU usage with certain USB to serial converters on Linux hosts (bug #7796) Storage: fixed attaching stream optimized VMDK images (bug #14764) Storage: reject image variants which are unsupported by the backend (bug #7227) Storage: fixed loading saved states created with VirtualBox 5.0.10 and older when using a SCSI controller (bug #15865) Storage: fixed broken NVMe emulation if the host I/O cache setting is enabled Storage: fixed using multiple NVMe controllers if ICH9 is used NVMe: fixed a crash during reset which could happen under certain circumstances Audio: fixed microphone input (5.1.2 regression; bugs #14386 and #15802) Audio: fixed crashes under certain conditions (5.1.0 regression; bug #15887 and others) Audio: fixed recording with the ALSA backend (5.1 regression) Audio: fixed stream access mode with OSS backend (5.1 regression, thanks to Jung-uk Kim) E1000: do also return masked bits when reading the ICR register, this fixes booting from iPXE (5.1.2 regression; bug #15846) BIOS: fixed 4bpp scanline calculation (bug #15787) API: relax the check for the version attribute in OVF/OVA appliances (bug #15856) Windows hosts: fixed crashes when terminating the VM selector or other VBox COM clients (bug #15726 and others) Linux Installer: fixed path to the documentation in .rpm packages (5.1.0 regression) Linux Installer: fixed the vboxdrv.sh script to prevent an SELinux complaint (bug #15816) Linux hosts: don't use 32-bit legacy capabilities Linux Additions: Linux 4.8 fix for the kernel display driver (bugs #15890 and #15896) Linux Additions: don't load the kernel modules provided by the Linux distribution but load the kernel modules from the official Guest Additions package instead (bug #15324) Linux Additions: fix dynamic resizing problems in recent Linux guests (bug #15875) User Manual: fixed error in the VBoxManage chapter for the getextradata enumerate example (bug #15862) - Add file "fix_removal_of_DEFINE_PCI_DEVICE_TABLE" to compile on kernel 4.8. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1366=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.8-3.3 virtualbox-host-source-5.1.8-3.3 - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.8-3.3 python-virtualbox-debuginfo-5.1.8-3.3 virtualbox-5.1.8-3.3 virtualbox-debuginfo-5.1.8-3.3 virtualbox-debugsource-5.1.8-3.3 virtualbox-devel-5.1.8-3.3 virtualbox-guest-kmp-default-5.1.8_k4.4.27_2-3.3 virtualbox-guest-kmp-default-debuginfo-5.1.8_k4.4.27_2-3.3 virtualbox-guest-tools-5.1.8-3.3 virtualbox-guest-tools-debuginfo-5.1.8-3.3 virtualbox-guest-x11-5.1.8-3.3 virtualbox-guest-x11-debuginfo-5.1.8-3.3 virtualbox-host-kmp-default-5.1.8_k4.4.27_2-3.3 virtualbox-host-kmp-default-debuginfo-5.1.8_k4.4.27_2-3.3 virtualbox-qt-5.1.8-3.3 virtualbox-qt-debuginfo-5.1.8-3.3 virtualbox-websrv-5.1.8-3.3 virtualbox-websrv-debuginfo-5.1.8-3.3 References: https://www.suse.com/security/cve/CVE-2016-5501.html https://www.suse.com/security/cve/CVE-2016-5538.html https://www.suse.com/security/cve/CVE-2016-5605.html https://www.suse.com/security/cve/CVE-2016-5608.html https://www.suse.com/security/cve/CVE-2016-5610.html https://www.suse.com/security/cve/CVE-2016-5611.html https://www.suse.com/security/cve/CVE-2016-5613.html https://bugzilla.suse.com/1005621

1 0