August 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2017:2311-1: important: Security update for samba and resource-agents
by opensuse-security＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Security Update: Security update for samba and resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2311-1 Rating: important References: #1048278 #1048339 #1048352 #1048387 #1048790 #1052577 #1054017 Cross-References: CVE-2017-11103 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update provides Samba 4.6.7, which fixes the following issues: - CVE-2017-11103: Metadata were being taken from the unauthenticated plaintext (the Ticket) rather than the authenticated and encrypted KDC response. (bsc#1048278) - Fix cephwrap_chdir(). (bsc#1048790) - Fix ctdb logs to /var/log/log.ctdb instead of /var/log/ctdb. (bsc#1048339) - Fix inconsistent ctdb socket path. (bsc#1048352) - Fix non-admin cephx authentication. (bsc#1048387) - CTDB cannot start when there is no persistent database. (bsc#1052577) The CTDB resource agent was also fixed to not fail when the database is empty. This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-987=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): ctdb-4.6.7+git.38.90b2cdb4f22-3.1 ctdb-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 ctdb-tests-4.6.7+git.38.90b2cdb4f22-3.1 ctdb-tests-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 ldirectord-4.0.1+git.1495055229.643177f1-3.1 libdcerpc-binding0-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-binding0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-devel-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-samr-devel-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-samr0-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-samr0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc0-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libndr-devel-4.6.7+git.38.90b2cdb4f22-3.1 libndr-krb5pac-devel-4.6.7+git.38.90b2cdb4f22-3.1 libndr-krb5pac0-4.6.7+git.38.90b2cdb4f22-3.1 libndr-krb5pac0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libndr-nbt-devel-4.6.7+git.38.90b2cdb4f22-3.1 libndr-nbt0-4.6.7+git.38.90b2cdb4f22-3.1 libndr-nbt0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libndr-standard-devel-4.6.7+git.38.90b2cdb4f22-3.1 libndr-standard0-4.6.7+git.38.90b2cdb4f22-3.1 libndr-standard0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libndr0-4.6.7+git.38.90b2cdb4f22-3.1 libndr0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libnetapi-devel-4.6.7+git.38.90b2cdb4f22-3.1 libnetapi0-4.6.7+git.38.90b2cdb4f22-3.1 libnetapi0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-credentials-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-credentials0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-credentials0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-errors-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-errors0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-errors0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-hostconfig-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-hostconfig0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-hostconfig0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-passdb-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-passdb0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-passdb0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-policy-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-policy0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-policy0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-util-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-util0-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-util0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsamdb-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsamdb0-4.6.7+git.38.90b2cdb4f22-3.1 libsamdb0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsmbclient-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsmbclient0-4.6.7+git.38.90b2cdb4f22-3.1 libsmbclient0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsmbconf-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsmbconf0-4.6.7+git.38.90b2cdb4f22-3.1 libsmbconf0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libsmbldap-devel-4.6.7+git.38.90b2cdb4f22-3.1 libsmbldap0-4.6.7+git.38.90b2cdb4f22-3.1 libsmbldap0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libtevent-util-devel-4.6.7+git.38.90b2cdb4f22-3.1 libtevent-util0-4.6.7+git.38.90b2cdb4f22-3.1 libtevent-util0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 libwbclient-devel-4.6.7+git.38.90b2cdb4f22-3.1 libwbclient0-4.6.7+git.38.90b2cdb4f22-3.1 libwbclient0-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 resource-agents-4.0.1+git.1495055229.643177f1-3.1 resource-agents-debuginfo-4.0.1+git.1495055229.643177f1-3.1 resource-agents-debugsource-4.0.1+git.1495055229.643177f1-3.1 samba-4.6.7+git.38.90b2cdb4f22-3.1 samba-client-4.6.7+git.38.90b2cdb4f22-3.1 samba-client-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-core-devel-4.6.7+git.38.90b2cdb4f22-3.1 samba-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-debugsource-4.6.7+git.38.90b2cdb4f22-3.1 samba-libs-4.6.7+git.38.90b2cdb4f22-3.1 samba-libs-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-pidl-4.6.7+git.38.90b2cdb4f22-3.1 samba-python-4.6.7+git.38.90b2cdb4f22-3.1 samba-python-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-test-4.6.7+git.38.90b2cdb4f22-3.1 samba-test-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-winbind-4.6.7+git.38.90b2cdb4f22-3.1 samba-winbind-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 - openSUSE Leap 42.3 (noarch): monitoring-plugins-metadata-4.0.1+git.1495055229.643177f1-3.1 samba-doc-4.6.7+git.38.90b2cdb4f22-3.1 - openSUSE Leap 42.3 (x86_64): libdcerpc-binding0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-binding0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-samr0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc-samr0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libdcerpc0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-krb5pac0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-krb5pac0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-nbt0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-nbt0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-standard0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr-standard0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libndr0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libnetapi0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libnetapi0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-credentials0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-credentials0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-errors0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-errors0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-hostconfig0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-hostconfig0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-passdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-passdb0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-policy0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-policy0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamba-util0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamdb0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsamdb0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbclient0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbconf0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbconf0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbldap0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libsmbldap0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libtevent-util0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libtevent-util0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libwbclient0-32bit-4.6.7+git.38.90b2cdb4f22-3.1 libwbclient0-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-ceph-4.6.7+git.38.90b2cdb4f22-3.1 samba-ceph-debuginfo-4.6.7+git.38.90b2cdb4f22-3.1 samba-client-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-client-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-libs-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-libs-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-winbind-32bit-4.6.7+git.38.90b2cdb4f22-3.1 samba-winbind-debuginfo-32bit-4.6.7+git.38.90b2cdb4f22-3.1 References: https://www.suse.com/security/cve/CVE-2017-11103.html https://bugzilla.suse.com/1048278 https://bugzilla.suse.com/1048339 https://bugzilla.suse.com/1048352 https://bugzilla.suse.com/1048387 https://bugzilla.suse.com/1048790 https://bugzilla.suse.com/1052577 https://bugzilla.suse.com/1054017

1 0

openSUSE-RU-2017:2310-1: Recommended update for SuSEfirewall2
by maintenance＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Recommended Update: Recommended update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2310-1 Rating: low References: #1044523 #906136 #946325 #963740 Affected Products: openSUSE Leap 42.3 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for SuSEfirewall2 provides the following fixes: - Make SuSEfirewall2 check for existing configuration in more sysctl.d style directories to allow packages and the user to create overrides easily (bsc#1044523) - Add support for customizing the sysctl paths to be scanned for existing configuration by changing the FW_SYSCTL_PATHS configuration variable (bsc#906136) - Correct the initialization order between SuSEfirewall2 and NFS components to make sure NFS server ports are correctly opened when both services are enabled in systemd, and to fix NFS clients not receiving callbacks from the server when started before SuSEfirewall2. (bsc#946325, bsc#963740) This update was imported from the SUSE:SLE-12-SP3:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-983=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): SuSEfirewall2-3.6.312.333-4.1 References: https://bugzilla.suse.com/1044523 https://bugzilla.suse.com/906136 https://bugzilla.suse.com/946325 https://bugzilla.suse.com/963740

1 0

openSUSE-SU-2017:2309-1: moderate: Security update for git-annex
by opensuse-security＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Security Update: Security update for git-annex ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2309-1 Rating: moderate References: #1054653 Cross-References: CVE-2017-12976 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for git-annex fixes the following issues: - CVE-2017-12976: Disallow hostname starting with a dash, which would get passed to ssh and be treated an option. This could be used by an attacker who provides a crafted repository url to cause the victim to execute arbitrary code via -oProxyCommand. (boo#1054653). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-986=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-986=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): git-annex-6.20170818-3.1 git-annex-bash-completion-6.20170818-3.1 - openSUSE Leap 42.2 (x86_64): git-annex-6.20170818-2.6.1 git-annex-bash-completion-6.20170818-2.6.1 References: https://www.suse.com/security/cve/CVE-2017-12976.html https://bugzilla.suse.com/1054653

1 0

openSUSE-RU-2017:2308-1: Recommended update for SuSEfirewall2
by maintenance＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Recommended Update: Recommended update for SuSEfirewall2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2308-1 Rating: low References: #1044523 #906136 #946325 #963740 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for SuSEfirewall2 provides the following fixes: - Make SuSEfirewall2 check for existing configuration in more sysctl.d style directories to allow packages and the user to create overrides easily (bsc#1044523) - Add support for customizing the sysctl paths to be scanned for existing configuration by changing the FW_SYSCTL_PATHS configuration variable (bsc#906136) - Correct the initialization order between SuSEfirewall2 and NFS components to make sure NFS server ports are correctly opened when both services are enabled in systemd, and to fix NFS clients not receiving callbacks from the server when started before SuSEfirewall2. (bsc#946325, bsc#963740) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-984=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): SuSEfirewall2-3.6.312-5.6.1 References: https://bugzilla.suse.com/1044523 https://bugzilla.suse.com/906136 https://bugzilla.suse.com/946325 https://bugzilla.suse.com/963740

1 0

openSUSE-RU-2017:2307-1: Recommended update for tryton, trytond
by maintenance＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Recommended Update: Recommended update for tryton, trytond ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2307-1 Rating: low References: #1054032 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for tryton and trytond fixes the following issues: - various small bug fixes in the Tryton 2.8 series (boo#1054032) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-982=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): tryton-3.8.16-10.9.1 trytond-3.8.14-9.15.1 trytond_account-3.8.6-5.3.1 trytond_stock-3.8.5-5.3.1 References: https://bugzilla.suse.com/1054032

1 0

openSUSE-SU-2017:2306-1: important: Security update for postgresql93
by opensuse-security＠opensuse.org 31 Aug '17

31 Aug '17

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2306-1 Rating: important References: #1051684 #1051685 #1053259 Cross-References: CVE-2017-7546 CVE-2017-7547 CVE-2017-7548 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: Postgresql93 was updated to 9.3.18 to fix the following issues: * CVE-2017-7547: Further restrict visibility of pg_user_mappings.umoptions, to protect passwords stored as user mapping options. (bsc#1051685) * CVE-2017-7546: Disallow empty passwords in all password-based authentication methods. (bsc#1051684) * CVE-2017-7548: lo_put() function ignores ACLs. (bsc#1053259) The changelog for the release is here: https://www.postgresql.org/docs/9.3/static/release-9-3-18.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-985=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-985=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): postgresql93-devel-9.3.18-8.1 postgresql93-devel-debuginfo-9.3.18-8.1 postgresql93-libs-debugsource-9.3.18-8.1 - openSUSE Leap 42.3 (x86_64): postgresql93-9.3.18-8.1 postgresql93-contrib-9.3.18-8.1 postgresql93-contrib-debuginfo-9.3.18-8.1 postgresql93-debuginfo-9.3.18-8.1 postgresql93-debugsource-9.3.18-8.1 postgresql93-plperl-9.3.18-8.1 postgresql93-plperl-debuginfo-9.3.18-8.1 postgresql93-plpython-9.3.18-8.1 postgresql93-plpython-debuginfo-9.3.18-8.1 postgresql93-pltcl-9.3.18-8.1 postgresql93-pltcl-debuginfo-9.3.18-8.1 postgresql93-server-9.3.18-8.1 postgresql93-server-debuginfo-9.3.18-8.1 postgresql93-test-9.3.18-8.1 - openSUSE Leap 42.3 (noarch): postgresql93-docs-9.3.18-8.1 - openSUSE Leap 42.2 (i586 x86_64): postgresql93-devel-9.3.18-5.12.1 postgresql93-devel-debuginfo-9.3.18-5.12.1 postgresql93-libs-debugsource-9.3.18-5.12.1 - openSUSE Leap 42.2 (noarch): postgresql93-docs-9.3.18-5.12.1 - openSUSE Leap 42.2 (x86_64): postgresql93-9.3.18-5.12.1 postgresql93-contrib-9.3.18-5.12.1 postgresql93-contrib-debuginfo-9.3.18-5.12.1 postgresql93-debuginfo-9.3.18-5.12.1 postgresql93-debugsource-9.3.18-5.12.1 postgresql93-plperl-9.3.18-5.12.1 postgresql93-plperl-debuginfo-9.3.18-5.12.1 postgresql93-plpython-9.3.18-5.12.1 postgresql93-plpython-debuginfo-9.3.18-5.12.1 postgresql93-pltcl-9.3.18-5.12.1 postgresql93-pltcl-debuginfo-9.3.18-5.12.1 postgresql93-server-9.3.18-5.12.1 postgresql93-server-debuginfo-9.3.18-5.12.1 postgresql93-test-9.3.18-5.12.1 References: https://www.suse.com/security/cve/CVE-2017-7546.html https://www.suse.com/security/cve/CVE-2017-7547.html https://www.suse.com/security/cve/CVE-2017-7548.html https://bugzilla.suse.com/1051684 https://bugzilla.suse.com/1051685 https://bugzilla.suse.com/1053259

1 0

openSUSE-RU-2017:2298-1: Recommended update for clamav-database
by maintenance＠opensuse.org 30 Aug '17

30 Aug '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2298-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh August 28th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-981=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201708280006-54.73.1 References:

1 0

openSUSE-SU-2017:2289-1: important: Security update for exim
by opensuse-security＠opensuse.org 29 Aug '17

29 Aug '17

openSUSE Security Update: Security update for exim ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:2289-1 Rating: important References: #1015930 #1044692 #1046971 Cross-References: CVE-2016-1531 CVE-2016-9963 CVE-2017-1000369 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for exim fixes the following issues: Changes in exim: - specify users with ref:mail, to make them dynamic. (boo#1046971) - CVE-2017-1000369: Fixed memory leaks that could be exploited to "stack crash" local privilege escalation (boo#1044692) - Require user(mail) group(mail) to meet new users handling in TW. - Prerequire permissions (fixes rpmlint). - conditionally disable DANE on SuSE versions with OpenSSL < 1.0 - CVE-2016-1531: when installed setuid root, allows local users to gain privileges via the perl_startup argument. - CVE-2016-9963: DKIM information leakage (boo#1015930) - Makefile tuning: + add sqlite support + disable WITH_OLD_DEMIME + enable AUTH_CYRUS_SASL + enable AUTH_TLS + enable SYSLOG_LONG_LINES + enable SUPPORT_PAM + MAX_NAMED_LIST=64 + enable EXPERIMENTAL_DMARC + enable EXPERIMENTAL_EVENT + enable EXPERIMENTAL_PROXY + enable EXPERIMENTAL_CERTNAMES + enable EXPERIMENTAL_DSN + enable EXPERIMENTAL_DANE + enable EXPERIMENTAL_SOCKS + enable EXPERIMENTAL_INTERNATIONAL Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-980=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-980=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (x86_64): exim-4.86.2-14.1 exim-debuginfo-4.86.2-14.1 exim-debugsource-4.86.2-14.1 eximon-4.86.2-14.1 eximon-debuginfo-4.86.2-14.1 eximstats-html-4.86.2-14.1 - openSUSE Leap 42.2 (x86_64): exim-4.86.2-10.6.1 exim-debuginfo-4.86.2-10.6.1 exim-debugsource-4.86.2-10.6.1 eximon-4.86.2-10.6.1 eximon-debuginfo-4.86.2-10.6.1 eximstats-html-4.86.2-10.6.1 References: https://www.suse.com/security/cve/CVE-2016-1531.html https://www.suse.com/security/cve/CVE-2016-9963.html https://www.suse.com/security/cve/CVE-2017-1000369.html https://bugzilla.suse.com/1015930 https://bugzilla.suse.com/1044692 https://bugzilla.suse.com/1046971

1 0

openSUSE-RU-2017:2279-1: Recommended update for python-rpm-macros
by maintenance＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Recommended Update: Recommended update for python-rpm-macros ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2279-1 Rating: low References: #1050472 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rpm-macros fixes the following issues: - Fix skip_python2 in environment where python2 is not actually present. - Introduce smarter buildset support. - Fix %python_files on non-standard build sets. - Introduce %python_for_executables in favor of magically taking "last python in %pythons". - Fix %license tag handling. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-979=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-979=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (noarch): python-rpm-macros-2017.06.29.107ac7a-3.1 - openSUSE Leap 42.2 (noarch): python-rpm-macros-2017.06.29.107ac7a-5.1 References: https://bugzilla.suse.com/1050472

1 0

openSUSE-RU-2017:2278-1: important: Recommended update for procps
by maintenance＠opensuse.org 28 Aug '17

28 Aug '17

openSUSE Recommended Update: Recommended update for procps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:2278-1 Rating: important References: #1053409 Affected Products: openSUSE Leap 42.3 openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for procps fixes the following issues: - Fix a regression introduced in a previous update that would result in sysctl dying with a SIGSEGV error (bsc#1053409). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.3: zypper in -t patch openSUSE-2017-977=1 - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-977=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.3 (i586 x86_64): libprocps3-3.3.9-17.1 libprocps3-debuginfo-3.3.9-17.1 procps-3.3.9-17.1 procps-debuginfo-3.3.9-17.1 procps-debugsource-3.3.9-17.1 procps-devel-3.3.9-17.1 - openSUSE Leap 42.2 (i586 x86_64): libprocps3-3.3.9-7.9.1 libprocps3-debuginfo-3.3.9-7.9.1 procps-3.3.9-7.9.1 procps-debuginfo-3.3.9-7.9.1 procps-debugsource-3.3.9-7.9.1 procps-devel-3.3.9-7.9.1 References: https://bugzilla.suse.com/1053409

1 0