April 2017 - openSUSE Security Announce

[security-announce] openSUSE-SU-2017:1021-1: important: Security update for postgresql93
by opensuse-security＠opensuse.org 15 Apr '17

15 Apr '17

openSUSE Security Update: Security update for postgresql93 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:1021-1 Rating: important References: #1029547 #973660 #993453 #993454 Cross-References: CVE-2016-5423 CVE-2016-5424 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for postgresql93 to version 9.3.14 fixes the several issues. These security issues were fixed: - CVE-2016-5423: CASE/WHEN with inlining can cause untrusted pointer dereference (bsc#993454). - CVE-2016-5424: Fix client programs' handling of special characters in database and role names (bsc#993453). This non-security issue was fixed: - bsc#973660: Added "Requires: timezone" to Service Pack - bsc#1029547: postgresql: fails to build with timezone 2017a For additional non-security issues please refer to - http://www.postgresql.org/docs/9.3/static/release-9-3-14.html - http://www.postgresql.org/docs/9.3/static/release-9-3-13.html - http://www.postgresql.org/docs/9.4/static/release-9-3-12.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-472=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-472=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): postgresql93-devel-9.3.14-5.5.1 postgresql93-devel-debuginfo-9.3.14-5.5.1 postgresql93-libs-debugsource-9.3.14-5.5.1 - openSUSE Leap 42.2 (x86_64): postgresql93-9.3.14-5.5.1 postgresql93-contrib-9.3.14-5.5.1 postgresql93-contrib-debuginfo-9.3.14-5.5.1 postgresql93-debuginfo-9.3.14-5.5.1 postgresql93-debugsource-9.3.14-5.5.1 postgresql93-plperl-9.3.14-5.5.1 postgresql93-plperl-debuginfo-9.3.14-5.5.1 postgresql93-plpython-9.3.14-5.5.1 postgresql93-plpython-debuginfo-9.3.14-5.5.1 postgresql93-pltcl-9.3.14-5.5.1 postgresql93-pltcl-debuginfo-9.3.14-5.5.1 postgresql93-server-9.3.14-5.5.1 postgresql93-server-debuginfo-9.3.14-5.5.1 postgresql93-test-9.3.14-5.5.1 - openSUSE Leap 42.2 (noarch): postgresql93-docs-9.3.14-5.5.1 - openSUSE Leap 42.1 (i586 x86_64): postgresql93-9.3.14-8.1 postgresql93-contrib-9.3.14-8.1 postgresql93-contrib-debuginfo-9.3.14-8.1 postgresql93-debuginfo-9.3.14-8.1 postgresql93-debugsource-9.3.14-8.1 postgresql93-devel-9.3.14-8.1 postgresql93-devel-debuginfo-9.3.14-8.1 postgresql93-libs-debugsource-9.3.14-8.1 postgresql93-plperl-9.3.14-8.1 postgresql93-plperl-debuginfo-9.3.14-8.1 postgresql93-plpython-9.3.14-8.1 postgresql93-plpython-debuginfo-9.3.14-8.1 postgresql93-pltcl-9.3.14-8.1 postgresql93-pltcl-debuginfo-9.3.14-8.1 postgresql93-server-9.3.14-8.1 postgresql93-server-debuginfo-9.3.14-8.1 postgresql93-test-9.3.14-8.1 - openSUSE Leap 42.1 (noarch): postgresql93-docs-9.3.14-8.1 References: https://www.suse.com/security/cve/CVE-2016-5423.html https://www.suse.com/security/cve/CVE-2016-5424.html https://bugzilla.suse.com/1029547 https://bugzilla.suse.com/973660 https://bugzilla.suse.com/993453 https://bugzilla.suse.com/993454 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0999-1: important: Security update for bind
by opensuse-security＠opensuse.org 13 Apr '17

13 Apr '17

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0999-1 Rating: important References: #1033466 #1033467 #1033468 #987866 #989528 Cross-References: CVE-2016-2775 CVE-2016-6170 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 Affected Products: SUSE Linux Enterprise Server for SAP 12 SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for bind fixes the following issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion. CVE-2017-3136 (bsc#1033466): An attacker could have constructed a query that would cause a denial of service of servers configured to use DNS64. CVE-2017-3138 (bsc#1033468): An attacker with access to the BIND control channel could have caused the server to stop by triggering an assertion failure. CVE-2016-6170 (bsc#987866): Primary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response. IXFR servers could have caused a denial of service of IXFR clients via a large IXFR response. Remote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message. CVE-2016-2775 (bsc#989528): When lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server for SAP 12: zypper in -t patch SUSE-SLE-SAP-12-2017-581=1 - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2017-581=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server for SAP 12 (x86_64): bind-9.9.9P1-28.34.1 bind-chrootenv-9.9.9P1-28.34.1 bind-debuginfo-9.9.9P1-28.34.1 bind-debugsource-9.9.9P1-28.34.1 bind-devel-9.9.9P1-28.34.1 bind-libs-32bit-9.9.9P1-28.34.1 bind-libs-9.9.9P1-28.34.1 bind-libs-debuginfo-32bit-9.9.9P1-28.34.1 bind-libs-debuginfo-9.9.9P1-28.34.1 bind-utils-9.9.9P1-28.34.1 bind-utils-debuginfo-9.9.9P1-28.34.1 - SUSE Linux Enterprise Server for SAP 12 (noarch): bind-doc-9.9.9P1-28.34.1 - SUSE Linux Enterprise Server 12-LTSS (ppc64le s390x x86_64): bind-9.9.9P1-28.34.1 bind-chrootenv-9.9.9P1-28.34.1 bind-debuginfo-9.9.9P1-28.34.1 bind-debugsource-9.9.9P1-28.34.1 bind-devel-9.9.9P1-28.34.1 bind-libs-9.9.9P1-28.34.1 bind-libs-debuginfo-9.9.9P1-28.34.1 bind-utils-9.9.9P1-28.34.1 bind-utils-debuginfo-9.9.9P1-28.34.1 - SUSE Linux Enterprise Server 12-LTSS (s390x x86_64): bind-libs-32bit-9.9.9P1-28.34.1 bind-libs-debuginfo-32bit-9.9.9P1-28.34.1 - SUSE Linux Enterprise Server 12-LTSS (noarch): bind-doc-9.9.9P1-28.34.1 References: https://www.suse.com/security/cve/CVE-2016-2775.html https://www.suse.com/security/cve/CVE-2016-6170.html https://www.suse.com/security/cve/CVE-2017-3136.html https://www.suse.com/security/cve/CVE-2017-3137.html https://www.suse.com/security/cve/CVE-2017-3138.html https://bugzilla.suse.com/1033466 https://bugzilla.suse.com/1033467 https://bugzilla.suse.com/1033468 https://bugzilla.suse.com/987866 https://bugzilla.suse.com/989528 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0998-1: important: Security update for bind
by opensuse-security＠opensuse.org 13 Apr '17

13 Apr '17

SUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0998-1 Rating: important References: #1020983 #1033466 #1033467 #1033468 #987866 #989528 Cross-References: CVE-2016-2775 CVE-2016-6170 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Software Development Kit 12-SP1 SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Server 12-SP1 SUSE Linux Enterprise Desktop 12-SP2 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that solves 5 vulnerabilities and has one errata is now available. Description: This update for bind fixes the following issues: CVE-2017-3137 (bsc#1033467): Mistaken assumptions about the ordering of records in the answer section of a response containing CNAME or DNAME resource records could have been exploited to cause a denial of service of a bind server performing recursion. CVE-2017-3136 (bsc#1033466): An attacker could have constructed a query that would cause a denial of service of servers configured to use DNS64. CVE-2017-3138 (bsc#1033468): An attacker with access to the BIND control channel could have caused the server to stop by triggering an assertion failure. CVE-2016-6170 (bsc#987866): Primary DNS servers could have caused a denial of service of secondary DNS servers via a large AXFR response. IXFR servers could have caused a denial of service of IXFR clients via a large IXFR response. Remote authenticated users could have caused a denial of service of primary DNS servers via a large UPDATE message. CVE-2016-2775 (bsc#989528): When lwresd or the named lwres option were enabled, bind allowed remote attackers to cause a denial of service (daemon crash) via a long request that uses the lightweight resolver protocol. One additional non-security bug was fixed: The default umask was changed to 077. (bsc#1020983) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-582=1 - SUSE Linux Enterprise Software Development Kit 12-SP1: zypper in -t patch SUSE-SLE-SDK-12-SP1-2017-582=1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2: zypper in -t patch SUSE-SLE-RPI-12-SP2-2017-582=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-582=1 - SUSE Linux Enterprise Server 12-SP1: zypper in -t patch SUSE-SLE-SERVER-12-SP1-2017-582=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-582=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-582=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 ppc64le s390x x86_64): bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-devel-9.9.9P1-59.1 - SUSE Linux Enterprise Software Development Kit 12-SP1 (ppc64le s390x x86_64): bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-devel-9.9.9P1-59.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (aarch64): bind-9.9.9P1-59.1 bind-chrootenv-9.9.9P1-59.1 bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-libs-9.9.9P1-59.1 bind-libs-debuginfo-9.9.9P1-59.1 bind-utils-9.9.9P1-59.1 bind-utils-debuginfo-9.9.9P1-59.1 - SUSE Linux Enterprise Server for Raspberry Pi 12-SP2 (noarch): bind-doc-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP2 (aarch64 ppc64le x86_64): bind-9.9.9P1-59.1 bind-chrootenv-9.9.9P1-59.1 bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-libs-9.9.9P1-59.1 bind-libs-debuginfo-9.9.9P1-59.1 bind-utils-9.9.9P1-59.1 bind-utils-debuginfo-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): bind-libs-32bit-9.9.9P1-59.1 bind-libs-debuginfo-32bit-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP2 (noarch): bind-doc-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP1 (ppc64le s390x x86_64): bind-9.9.9P1-59.1 bind-chrootenv-9.9.9P1-59.1 bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-libs-9.9.9P1-59.1 bind-libs-debuginfo-9.9.9P1-59.1 bind-utils-9.9.9P1-59.1 bind-utils-debuginfo-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP1 (s390x x86_64): bind-libs-32bit-9.9.9P1-59.1 bind-libs-debuginfo-32bit-9.9.9P1-59.1 - SUSE Linux Enterprise Server 12-SP1 (noarch): bind-doc-9.9.9P1-59.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-libs-32bit-9.9.9P1-59.1 bind-libs-9.9.9P1-59.1 bind-libs-debuginfo-32bit-9.9.9P1-59.1 bind-libs-debuginfo-9.9.9P1-59.1 bind-utils-9.9.9P1-59.1 bind-utils-debuginfo-9.9.9P1-59.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): bind-debuginfo-9.9.9P1-59.1 bind-debugsource-9.9.9P1-59.1 bind-libs-32bit-9.9.9P1-59.1 bind-libs-9.9.9P1-59.1 bind-libs-debuginfo-32bit-9.9.9P1-59.1 bind-libs-debuginfo-9.9.9P1-59.1 bind-utils-9.9.9P1-59.1 bind-utils-debuginfo-9.9.9P1-59.1 References: https://www.suse.com/security/cve/CVE-2016-2775.html https://www.suse.com/security/cve/CVE-2016-6170.html https://www.suse.com/security/cve/CVE-2017-3136.html https://www.suse.com/security/cve/CVE-2017-3137.html https://www.suse.com/security/cve/CVE-2017-3138.html https://bugzilla.suse.com/1020983 https://bugzilla.suse.com/1033466 https://bugzilla.suse.com/1033467 https://bugzilla.suse.com/1033468 https://bugzilla.suse.com/987866 https://bugzilla.suse.com/989528 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0990-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 12 Apr '17

12 Apr '17

SUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0990-1 Rating: important References: #1033619 Cross-References: CVE-2017-3058 CVE-2017-3059 CVE-2017-3060 CVE-2017-3061 CVE-2017-3062 CVE-2017-3063 CVE-2017-3064 Affected Products: SUSE Linux Enterprise Workstation Extension 12-SP1 SUSE Linux Enterprise Desktop 12-SP1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: Adobe flash-player was updated to 25.0.0.148 to fix the following issues: - Vulnerabilities fixed as advised under APSB17-10: * Use-after-free vulnerabilities that could lead to code execution (CVE-2017-3058, CVE-2017-3059, CVE-2017-3062, CVE-2017-3063). * Resolve memory corruption vulnerabilities that could lead to code execution (CVE-2017-3060, CVE-2017-3061, CVE-2017-3064). - Details: https://helpx.adobe.com/security/products/flash-player/apsb17-10.html Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Workstation Extension 12-SP1: zypper in -t patch SUSE-SLE-WE-12-SP1-2017-576=1 - SUSE Linux Enterprise Desktop 12-SP1: zypper in -t patch SUSE-SLE-DESKTOP-12-SP1-2017-576=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Workstation Extension 12-SP1 (x86_64): flash-player-25.0.0.148-165.1 flash-player-gnome-25.0.0.148-165.1 - SUSE Linux Enterprise Desktop 12-SP1 (x86_64): flash-player-25.0.0.148-165.1 flash-player-gnome-25.0.0.148-165.1 References: https://www.suse.com/security/cve/CVE-2017-3058.html https://www.suse.com/security/cve/CVE-2017-3059.html https://www.suse.com/security/cve/CVE-2017-3060.html https://www.suse.com/security/cve/CVE-2017-3061.html https://www.suse.com/security/cve/CVE-2017-3062.html https://www.suse.com/security/cve/CVE-2017-3063.html https://www.suse.com/security/cve/CVE-2017-3064.html https://bugzilla.suse.com/1033619 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0983-1: important: Security update for xen
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0983-1 Rating: important References: #1014136 #1015348 #1022555 #1026236 #1027519 #1028235 #1029128 #1029827 #1030144 #1030442 Cross-References: CVE-2017-6505 CVE-2017-7228 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP2 SUSE Linux Enterprise Server 12-SP2 SUSE Linux Enterprise Desktop 12-SP2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 8 fixes is now available. Description: This update for xen to version 4.7.2 fixes the following issues: These security issues were fixed: - CVE-2017-7228: Broken check in memory_exchange() permited PV guest breakout (bsc#1030442). - XSA-206: Unprivileged guests issuing writes to xenstore were able to stall progress of the control domain or driver domain, possibly leading to a Denial of Service (DoS) of the entire host (bsc#1030144). - CVE-2017-6505: The ohci_service_ed_list function in hw/usb/hcd-ohci.c allowed local guest OS users to cause a denial of service (infinite loop) via vectors involving the number of link endpoint list descriptors (bsc#1028235). These non-security issues were fixed: - bsc#1015348: libvirtd didn't not start during boot - bsc#1014136: kdump couldn't dump a kernel on SLES12-SP2 with Xen hypervisor. - bsc#1026236: Fixed paravirtualized performance - bsc#1022555: Timeout in "execution of /etc/xen/scripts/block add" - bsc#1029827: Forward port xenstored - bsc#1029128: Make xen to really produce xen.efi with gcc48 Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP2: zypper in -t patch SUSE-SLE-SDK-12-SP2-2017-572=1 - SUSE Linux Enterprise Server 12-SP2: zypper in -t patch SUSE-SLE-SERVER-12-SP2-2017-572=1 - SUSE Linux Enterprise Desktop 12-SP2: zypper in -t patch SUSE-SLE-DESKTOP-12-SP2-2017-572=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 12-SP2 (aarch64 x86_64): xen-debugsource-4.7.2_02-36.1 xen-devel-4.7.2_02-36.1 - SUSE Linux Enterprise Server 12-SP2 (x86_64): xen-4.7.2_02-36.1 xen-debugsource-4.7.2_02-36.1 xen-doc-html-4.7.2_02-36.1 xen-libs-32bit-4.7.2_02-36.1 xen-libs-4.7.2_02-36.1 xen-libs-debuginfo-32bit-4.7.2_02-36.1 xen-libs-debuginfo-4.7.2_02-36.1 xen-tools-4.7.2_02-36.1 xen-tools-debuginfo-4.7.2_02-36.1 xen-tools-domU-4.7.2_02-36.1 xen-tools-domU-debuginfo-4.7.2_02-36.1 - SUSE Linux Enterprise Desktop 12-SP2 (x86_64): xen-4.7.2_02-36.1 xen-debugsource-4.7.2_02-36.1 xen-libs-32bit-4.7.2_02-36.1 xen-libs-4.7.2_02-36.1 xen-libs-debuginfo-32bit-4.7.2_02-36.1 xen-libs-debuginfo-4.7.2_02-36.1 References: https://www.suse.com/security/cve/CVE-2017-6505.html https://www.suse.com/security/cve/CVE-2017-7228.html https://bugzilla.suse.com/1014136 https://bugzilla.suse.com/1015348 https://bugzilla.suse.com/1022555 https://bugzilla.suse.com/1026236 https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1028235 https://bugzilla.suse.com/1029128 https://bugzilla.suse.com/1029827 https://bugzilla.suse.com/1030144 https://bugzilla.suse.com/1030442 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0973-1: important: Security update for pidgin
by opensuse-security＠opensuse.org 11 Apr '17

11 Apr '17

openSUSE Security Update: Security update for pidgin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0973-1 Rating: important References: #1009974 #1028835 Cross-References: CVE-2017-2640 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for pidgin to version 2.12.0 fixes the following issues: This security issue was fixed: - CVE-2017-2640: Out of bounds memory read in purple_markup_unescape_entity (boo#1028835). These non-security issues were fixed: + libpurple: - Fix the use of uninitialised memory if running non-debug-enabled versions of glib. - Update AIM dev and dist ID's to new ones that were assigned by AOL. - TLS certificate verification now uses SHA-256 checksums. - Fix the SASL external auth for Freenode (boo#1009974). - Remove the MSN protocol plugin. It has been unusable and dormant for some time. - Remove the Mxit protocol plugin. The service was closed at the end ofSeptember 2016. - Remove the MySpaceIM protocol plugin. The service has been defunct for a long time (pidgin.im#15356). - Remove the Yahoo! protocol plugin. Yahoo has completely reimplemented their protocol, so this version is no longer operable as of August 5th, 2016. - Remove the Facebook (XMPP) account option. According to https://developers.facebook.com/docs/chat the XMPP Chat API service ended April 30th, 2015. - Fix gnutls certificate validation errors that mainly affected Google. + General: - Replace instances of d.pidgin.im with developer.pidgin.im and update the urls to use https (pidgin.im#17036). + IRC: - Fix an issue of messages being silently cut off at 500 characters. Large messages are now split into parts and sent one by one (pidgin.im#4753). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-457=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): libpurple-branding-openSUSE-42.2-3.3.2 libpurple-branding-upstream-2.12.0-8.6.1 libpurple-lang-2.12.0-8.6.1 - openSUSE Leap 42.2 (x86_64): finch-2.12.0-8.6.1 finch-debuginfo-2.12.0-8.6.1 finch-devel-2.12.0-8.6.1 libpurple-2.12.0-8.6.1 libpurple-debuginfo-2.12.0-8.6.1 libpurple-devel-2.12.0-8.6.1 libpurple-plugin-sametime-2.12.0-8.6.1 libpurple-plugin-sametime-debuginfo-2.12.0-8.6.1 libpurple-tcl-2.12.0-8.6.1 libpurple-tcl-debuginfo-2.12.0-8.6.1 pidgin-2.12.0-8.6.1 pidgin-debuginfo-2.12.0-8.6.1 pidgin-debugsource-2.12.0-8.6.1 pidgin-devel-2.12.0-8.6.1 References: https://www.suse.com/security/cve/CVE-2017-2640.html https://bugzilla.suse.com/1009974 https://bugzilla.suse.com/1028835 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0969-1: important: Security update for apparmor
by opensuse-security＠opensuse.org 10 Apr '17

10 Apr '17

openSUSE Security Update: Security update for apparmor ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0969-1 Rating: important References: #1016259 #1017260 #1029696 Cross-References: CVE-2017-6507 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has two fixes is now available. Description: This update for apparmor fixes the following issues: These security issues were fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service (lp#1668892, boo#1029696) - boo#1017260: Migration to apparmor.service accidently disable AppArmor. Note: This will re-enable AppArmor if it was disabled by the last update. You'll need to "rcapparmor reload" to actually load the profiles, and then check aa-status for programs that need to be restarted to apply the profiles. These non-security issues were fixed: - Fixed crash in aa-logprof on specific change_hat events - boo#1016259: Added var.mount dependeny to apparmor.service The aa-remove-unknown utility was added to unload unknown profiles (lp#1668892) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-452=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-452=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.3.1 apache2-mod_apparmor-debuginfo-2.10.2-12.3.1 apparmor-debugsource-2.10.2-12.3.1 apparmor-parser-2.10.2-12.3.1 apparmor-parser-debuginfo-2.10.2-12.3.1 libapparmor-devel-2.10.2-12.3.1 libapparmor1-2.10.2-12.3.1 libapparmor1-debuginfo-2.10.2-12.3.1 pam_apparmor-2.10.2-12.3.1 pam_apparmor-debuginfo-2.10.2-12.3.1 perl-apparmor-2.10.2-12.3.1 perl-apparmor-debuginfo-2.10.2-12.3.1 python3-apparmor-2.10.2-12.3.1 python3-apparmor-debuginfo-2.10.2-12.3.1 ruby-apparmor-2.10.2-12.3.1 ruby-apparmor-debuginfo-2.10.2-12.3.1 - openSUSE Leap 42.2 (x86_64): libapparmor1-32bit-2.10.2-12.3.1 libapparmor1-debuginfo-32bit-2.10.2-12.3.1 pam_apparmor-32bit-2.10.2-12.3.1 pam_apparmor-debuginfo-32bit-2.10.2-12.3.1 - openSUSE Leap 42.2 (noarch): apparmor-abstractions-2.10.2-12.3.1 apparmor-docs-2.10.2-12.3.1 apparmor-parser-lang-2.10.2-12.3.1 apparmor-profiles-2.10.2-12.3.1 apparmor-utils-2.10.2-12.3.1 apparmor-utils-lang-2.10.2-12.3.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_apparmor-2.10.2-12.1 apache2-mod_apparmor-debuginfo-2.10.2-12.1 apparmor-debugsource-2.10.2-12.1 apparmor-parser-2.10.2-12.1 apparmor-parser-debuginfo-2.10.2-12.1 libapparmor-devel-2.10.2-12.1 libapparmor1-2.10.2-12.1 libapparmor1-debuginfo-2.10.2-12.1 pam_apparmor-2.10.2-12.1 pam_apparmor-debuginfo-2.10.2-12.1 perl-apparmor-2.10.2-12.1 perl-apparmor-debuginfo-2.10.2-12.1 python3-apparmor-2.10.2-12.1 python3-apparmor-debuginfo-2.10.2-12.1 ruby-apparmor-2.10.2-12.1 ruby-apparmor-debuginfo-2.10.2-12.1 - openSUSE Leap 42.1 (noarch): apparmor-abstractions-2.10.2-12.1 apparmor-docs-2.10.2-12.1 apparmor-parser-lang-2.10.2-12.1 apparmor-profiles-2.10.2-12.1 apparmor-utils-2.10.2-12.1 apparmor-utils-lang-2.10.2-12.1 - openSUSE Leap 42.1 (x86_64): libapparmor1-32bit-2.10.2-12.1 libapparmor1-debuginfo-32bit-2.10.2-12.1 pam_apparmor-32bit-2.10.2-12.1 pam_apparmor-debuginfo-32bit-2.10.2-12.1 References: https://www.suse.com/security/cve/CVE-2017-6507.html https://bugzilla.suse.com/1016259 https://bugzilla.suse.com/1017260 https://bugzilla.suse.com/1029696 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] SUSE-SU-2017:0946-1: important: Security update for jasper
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

SUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: SUSE-SU-2017:0946-1 Rating: important References: #1010977 #1010979 #1011830 #1012530 #1015400 #1015993 #1018088 #1020353 #1021868 #1029497 Cross-References: CVE-2016-10251 CVE-2016-8654 CVE-2016-9395 CVE-2016-9398 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2017-5498 CVE-2017-6850 Affected Products: SUSE Linux Enterprise Software Development Kit 11-SP4 SUSE Linux Enterprise Server 11-SP4 SUSE Linux Enterprise Debuginfo 11-SP4 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for jasper fixes the following issues: Security issues fixed: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec (bsc#1012530) - CVE-2016-9395: Missing sanity checks on the data in a SIZ marker segment (bsc#1010977). - CVE-2016-9398: jpc_math.c:94: int jpc_floorlog2(int): Assertion 'x > 0' failed. (bsc#1010979) - CVE-2016-9560: stack-based buffer overflow in jpc_tsfb_getbands2 (jpc_tsfb.c) (bsc#1011830) - CVE-2016-9583: Out of bounds heap read in jpc_pi_nextpcrl() (bsc#1015400) - CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy (bsc#1015993) - CVE-2016-9600: Null Pointer Dereference due to missing check for UNKNOWN color space in JP2 encoder (bsc#1018088) - CVE-2016-10251: Use of uninitialized value in jpc_pi_nextcprl (jpc_t2cod.c) (bsc#1029497) - CVE-2017-5498: left-shift undefined behaviour (bsc#1020353) - CVE-2017-6850: NULL pointer dereference in jp2_cdef_destroy (jp2_cod.c) (bsc#1021868) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-jasper-13051=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-jasper-13051=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-jasper-13051=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 ia64 ppc64 s390x x86_64): libjasper-devel-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (i586 ia64 ppc64 s390x x86_64): libjasper-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (ppc64 s390x x86_64): libjasper-32bit-1.900.14-134.32.1 - SUSE Linux Enterprise Server 11-SP4 (ia64): libjasper-x86-1.900.14-134.32.1 - SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ia64 ppc64 s390x x86_64): jasper-debuginfo-1.900.14-134.32.1 jasper-debugsource-1.900.14-134.32.1 References: https://www.suse.com/security/cve/CVE-2016-10251.html https://www.suse.com/security/cve/CVE-2016-8654.html https://www.suse.com/security/cve/CVE-2016-9395.html https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9560.html https://www.suse.com/security/cve/CVE-2016-9583.html https://www.suse.com/security/cve/CVE-2016-9591.html https://www.suse.com/security/cve/CVE-2016-9600.html https://www.suse.com/security/cve/CVE-2017-5498.html https://www.suse.com/security/cve/CVE-2017-6850.html https://bugzilla.suse.com/1010977 https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1011830 https://bugzilla.suse.com/1012530 https://bugzilla.suse.com/1015400 https://bugzilla.suse.com/1015993 https://bugzilla.suse.com/1018088 https://bugzilla.suse.com/1020353 https://bugzilla.suse.com/1021868 https://bugzilla.suse.com/1029497 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0944-1: important: Security update for samba
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0944-1 Rating: important References: #1012092 #1019416 #1023847 #1024416 #1027147 #993692 #993707 Cross-References: CVE-2017-2619 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has 6 fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147). Bugfixes: - Force usage of ncurses6-config thru NCURSES_CONFIG env var (bsc#1023847). - Add missing ldb module directory (bsc#1012092). - Don't package man pages for VFS modules that aren't built (bsc#993707). - sync_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-437=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ctdb-4.4.2-11.3.1 ctdb-debuginfo-4.4.2-11.3.1 ctdb-tests-4.4.2-11.3.1 ctdb-tests-debuginfo-4.4.2-11.3.1 libdcerpc-binding0-4.4.2-11.3.1 libdcerpc-binding0-debuginfo-4.4.2-11.3.1 libdcerpc-devel-4.4.2-11.3.1 libdcerpc-samr-devel-4.4.2-11.3.1 libdcerpc-samr0-4.4.2-11.3.1 libdcerpc-samr0-debuginfo-4.4.2-11.3.1 libdcerpc0-4.4.2-11.3.1 libdcerpc0-debuginfo-4.4.2-11.3.1 libndr-devel-4.4.2-11.3.1 libndr-krb5pac-devel-4.4.2-11.3.1 libndr-krb5pac0-4.4.2-11.3.1 libndr-krb5pac0-debuginfo-4.4.2-11.3.1 libndr-nbt-devel-4.4.2-11.3.1 libndr-nbt0-4.4.2-11.3.1 libndr-nbt0-debuginfo-4.4.2-11.3.1 libndr-standard-devel-4.4.2-11.3.1 libndr-standard0-4.4.2-11.3.1 libndr-standard0-debuginfo-4.4.2-11.3.1 libndr0-4.4.2-11.3.1 libndr0-debuginfo-4.4.2-11.3.1 libnetapi-devel-4.4.2-11.3.1 libnetapi0-4.4.2-11.3.1 libnetapi0-debuginfo-4.4.2-11.3.1 libsamba-credentials-devel-4.4.2-11.3.1 libsamba-credentials0-4.4.2-11.3.1 libsamba-credentials0-debuginfo-4.4.2-11.3.1 libsamba-errors-devel-4.4.2-11.3.1 libsamba-errors0-4.4.2-11.3.1 libsamba-errors0-debuginfo-4.4.2-11.3.1 libsamba-hostconfig-devel-4.4.2-11.3.1 libsamba-hostconfig0-4.4.2-11.3.1 libsamba-hostconfig0-debuginfo-4.4.2-11.3.1 libsamba-passdb-devel-4.4.2-11.3.1 libsamba-passdb0-4.4.2-11.3.1 libsamba-passdb0-debuginfo-4.4.2-11.3.1 libsamba-policy-devel-4.4.2-11.3.1 libsamba-policy0-4.4.2-11.3.1 libsamba-policy0-debuginfo-4.4.2-11.3.1 libsamba-util-devel-4.4.2-11.3.1 libsamba-util0-4.4.2-11.3.1 libsamba-util0-debuginfo-4.4.2-11.3.1 libsamdb-devel-4.4.2-11.3.1 libsamdb0-4.4.2-11.3.1 libsamdb0-debuginfo-4.4.2-11.3.1 libsmbclient-devel-4.4.2-11.3.1 libsmbclient0-4.4.2-11.3.1 libsmbclient0-debuginfo-4.4.2-11.3.1 libsmbconf-devel-4.4.2-11.3.1 libsmbconf0-4.4.2-11.3.1 libsmbconf0-debuginfo-4.4.2-11.3.1 libsmbldap-devel-4.4.2-11.3.1 libsmbldap0-4.4.2-11.3.1 libsmbldap0-debuginfo-4.4.2-11.3.1 libtevent-util-devel-4.4.2-11.3.1 libtevent-util0-4.4.2-11.3.1 libtevent-util0-debuginfo-4.4.2-11.3.1 libwbclient-devel-4.4.2-11.3.1 libwbclient0-4.4.2-11.3.1 libwbclient0-debuginfo-4.4.2-11.3.1 samba-4.4.2-11.3.1 samba-client-4.4.2-11.3.1 samba-client-debuginfo-4.4.2-11.3.1 samba-core-devel-4.4.2-11.3.1 samba-debuginfo-4.4.2-11.3.1 samba-debugsource-4.4.2-11.3.1 samba-libs-4.4.2-11.3.1 samba-libs-debuginfo-4.4.2-11.3.1 samba-pidl-4.4.2-11.3.1 samba-python-4.4.2-11.3.1 samba-python-debuginfo-4.4.2-11.3.1 samba-test-4.4.2-11.3.1 samba-test-debuginfo-4.4.2-11.3.1 samba-winbind-4.4.2-11.3.1 samba-winbind-debuginfo-4.4.2-11.3.1 - openSUSE Leap 42.2 (x86_64): libdcerpc-binding0-32bit-4.4.2-11.3.1 libdcerpc-binding0-debuginfo-32bit-4.4.2-11.3.1 libdcerpc-samr0-32bit-4.4.2-11.3.1 libdcerpc-samr0-debuginfo-32bit-4.4.2-11.3.1 libdcerpc0-32bit-4.4.2-11.3.1 libdcerpc0-debuginfo-32bit-4.4.2-11.3.1 libndr-krb5pac0-32bit-4.4.2-11.3.1 libndr-krb5pac0-debuginfo-32bit-4.4.2-11.3.1 libndr-nbt0-32bit-4.4.2-11.3.1 libndr-nbt0-debuginfo-32bit-4.4.2-11.3.1 libndr-standard0-32bit-4.4.2-11.3.1 libndr-standard0-debuginfo-32bit-4.4.2-11.3.1 libndr0-32bit-4.4.2-11.3.1 libndr0-debuginfo-32bit-4.4.2-11.3.1 libnetapi0-32bit-4.4.2-11.3.1 libnetapi0-debuginfo-32bit-4.4.2-11.3.1 libsamba-credentials0-32bit-4.4.2-11.3.1 libsamba-credentials0-debuginfo-32bit-4.4.2-11.3.1 libsamba-errors0-32bit-4.4.2-11.3.1 libsamba-errors0-debuginfo-32bit-4.4.2-11.3.1 libsamba-hostconfig0-32bit-4.4.2-11.3.1 libsamba-hostconfig0-debuginfo-32bit-4.4.2-11.3.1 libsamba-passdb0-32bit-4.4.2-11.3.1 libsamba-passdb0-debuginfo-32bit-4.4.2-11.3.1 libsamba-policy0-32bit-4.4.2-11.3.1 libsamba-policy0-debuginfo-32bit-4.4.2-11.3.1 libsamba-util0-32bit-4.4.2-11.3.1 libsamba-util0-debuginfo-32bit-4.4.2-11.3.1 libsamdb0-32bit-4.4.2-11.3.1 libsamdb0-debuginfo-32bit-4.4.2-11.3.1 libsmbclient0-32bit-4.4.2-11.3.1 libsmbclient0-debuginfo-32bit-4.4.2-11.3.1 libsmbconf0-32bit-4.4.2-11.3.1 libsmbconf0-debuginfo-32bit-4.4.2-11.3.1 libsmbldap0-32bit-4.4.2-11.3.1 libsmbldap0-debuginfo-32bit-4.4.2-11.3.1 libtevent-util0-32bit-4.4.2-11.3.1 libtevent-util0-debuginfo-32bit-4.4.2-11.3.1 libwbclient0-32bit-4.4.2-11.3.1 libwbclient0-debuginfo-32bit-4.4.2-11.3.1 samba-client-32bit-4.4.2-11.3.1 samba-client-debuginfo-32bit-4.4.2-11.3.1 samba-libs-32bit-4.4.2-11.3.1 samba-libs-debuginfo-32bit-4.4.2-11.3.1 samba-winbind-32bit-4.4.2-11.3.1 samba-winbind-debuginfo-32bit-4.4.2-11.3.1 - openSUSE Leap 42.2 (noarch): samba-doc-4.4.2-11.3.1 References: https://www.suse.com/security/cve/CVE-2017-2619.html https://bugzilla.suse.com/1012092 https://bugzilla.suse.com/1019416 https://bugzilla.suse.com/1023847 https://bugzilla.suse.com/1024416 https://bugzilla.suse.com/1027147 https://bugzilla.suse.com/993692 https://bugzilla.suse.com/993707 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0

[security-announce] openSUSE-SU-2017:0935-1: important: Security update for samba
by opensuse-security＠opensuse.org 05 Apr '17

05 Apr '17

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0935-1 Rating: important References: #1019416 #1024416 #1027147 #993692 #993707 Cross-References: CVE-2017-2619 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has four fixes is now available. Description: This update for samba fixes the following issues: Security issues fixed: - CVE-2017-2619: Symlink race permits opening files outside share directory (bsc#1027147). Bugfixes: - Don't package man pages for VFS modules that aren't built (bsc#993707). - sync_req: make async_connect_send() "reentrant"; (bso#12105); (bsc#1024416). - Document "winbind: ignore domains" parameter; (bsc#1019416). - Prevent core, make sure response->extra_data.data is always cleared out; (bsc#993692). This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-439=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ctdb-4.2.4-27.1 ctdb-debuginfo-4.2.4-27.1 ctdb-devel-4.2.4-27.1 ctdb-tests-4.2.4-27.1 ctdb-tests-debuginfo-4.2.4-27.1 libdcerpc-atsvc-devel-4.2.4-27.1 libdcerpc-atsvc0-4.2.4-27.1 libdcerpc-atsvc0-debuginfo-4.2.4-27.1 libdcerpc-binding0-4.2.4-27.1 libdcerpc-binding0-debuginfo-4.2.4-27.1 libdcerpc-devel-4.2.4-27.1 libdcerpc-samr-devel-4.2.4-27.1 libdcerpc-samr0-4.2.4-27.1 libdcerpc-samr0-debuginfo-4.2.4-27.1 libdcerpc0-4.2.4-27.1 libdcerpc0-debuginfo-4.2.4-27.1 libgensec-devel-4.2.4-27.1 libgensec0-4.2.4-27.1 libgensec0-debuginfo-4.2.4-27.1 libndr-devel-4.2.4-27.1 libndr-krb5pac-devel-4.2.4-27.1 libndr-krb5pac0-4.2.4-27.1 libndr-krb5pac0-debuginfo-4.2.4-27.1 libndr-nbt-devel-4.2.4-27.1 libndr-nbt0-4.2.4-27.1 libndr-nbt0-debuginfo-4.2.4-27.1 libndr-standard-devel-4.2.4-27.1 libndr-standard0-4.2.4-27.1 libndr-standard0-debuginfo-4.2.4-27.1 libndr0-4.2.4-27.1 libndr0-debuginfo-4.2.4-27.1 libnetapi-devel-4.2.4-27.1 libnetapi0-4.2.4-27.1 libnetapi0-debuginfo-4.2.4-27.1 libregistry-devel-4.2.4-27.1 libregistry0-4.2.4-27.1 libregistry0-debuginfo-4.2.4-27.1 libsamba-credentials-devel-4.2.4-27.1 libsamba-credentials0-4.2.4-27.1 libsamba-credentials0-debuginfo-4.2.4-27.1 libsamba-hostconfig-devel-4.2.4-27.1 libsamba-hostconfig0-4.2.4-27.1 libsamba-hostconfig0-debuginfo-4.2.4-27.1 libsamba-passdb-devel-4.2.4-27.1 libsamba-passdb0-4.2.4-27.1 libsamba-passdb0-debuginfo-4.2.4-27.1 libsamba-policy-devel-4.2.4-27.1 libsamba-policy0-4.2.4-27.1 libsamba-policy0-debuginfo-4.2.4-27.1 libsamba-util-devel-4.2.4-27.1 libsamba-util0-4.2.4-27.1 libsamba-util0-debuginfo-4.2.4-27.1 libsamdb-devel-4.2.4-27.1 libsamdb0-4.2.4-27.1 libsamdb0-debuginfo-4.2.4-27.1 libsmbclient-devel-4.2.4-27.1 libsmbclient-raw-devel-4.2.4-27.1 libsmbclient-raw0-4.2.4-27.1 libsmbclient-raw0-debuginfo-4.2.4-27.1 libsmbclient0-4.2.4-27.1 libsmbclient0-debuginfo-4.2.4-27.1 libsmbconf-devel-4.2.4-27.1 libsmbconf0-4.2.4-27.1 libsmbconf0-debuginfo-4.2.4-27.1 libsmbldap-devel-4.2.4-27.1 libsmbldap0-4.2.4-27.1 libsmbldap0-debuginfo-4.2.4-27.1 libtevent-util-devel-4.2.4-27.1 libtevent-util0-4.2.4-27.1 libtevent-util0-debuginfo-4.2.4-27.1 libwbclient-devel-4.2.4-27.1 libwbclient0-4.2.4-27.1 libwbclient0-debuginfo-4.2.4-27.1 samba-4.2.4-27.1 samba-client-4.2.4-27.1 samba-client-debuginfo-4.2.4-27.1 samba-core-devel-4.2.4-27.1 samba-debuginfo-4.2.4-27.1 samba-debugsource-4.2.4-27.1 samba-libs-4.2.4-27.1 samba-libs-debuginfo-4.2.4-27.1 samba-pidl-4.2.4-27.1 samba-python-4.2.4-27.1 samba-python-debuginfo-4.2.4-27.1 samba-test-4.2.4-27.1 samba-test-debuginfo-4.2.4-27.1 samba-test-devel-4.2.4-27.1 samba-winbind-4.2.4-27.1 samba-winbind-debuginfo-4.2.4-27.1 - openSUSE Leap 42.1 (x86_64): libdcerpc-atsvc0-32bit-4.2.4-27.1 libdcerpc-atsvc0-debuginfo-32bit-4.2.4-27.1 libdcerpc-binding0-32bit-4.2.4-27.1 libdcerpc-binding0-debuginfo-32bit-4.2.4-27.1 libdcerpc-samr0-32bit-4.2.4-27.1 libdcerpc-samr0-debuginfo-32bit-4.2.4-27.1 libdcerpc0-32bit-4.2.4-27.1 libdcerpc0-debuginfo-32bit-4.2.4-27.1 libgensec0-32bit-4.2.4-27.1 libgensec0-debuginfo-32bit-4.2.4-27.1 libndr-krb5pac0-32bit-4.2.4-27.1 libndr-krb5pac0-debuginfo-32bit-4.2.4-27.1 libndr-nbt0-32bit-4.2.4-27.1 libndr-nbt0-debuginfo-32bit-4.2.4-27.1 libndr-standard0-32bit-4.2.4-27.1 libndr-standard0-debuginfo-32bit-4.2.4-27.1 libndr0-32bit-4.2.4-27.1 libndr0-debuginfo-32bit-4.2.4-27.1 libnetapi0-32bit-4.2.4-27.1 libnetapi0-debuginfo-32bit-4.2.4-27.1 libregistry0-32bit-4.2.4-27.1 libregistry0-debuginfo-32bit-4.2.4-27.1 libsamba-credentials0-32bit-4.2.4-27.1 libsamba-credentials0-debuginfo-32bit-4.2.4-27.1 libsamba-hostconfig0-32bit-4.2.4-27.1 libsamba-hostconfig0-debuginfo-32bit-4.2.4-27.1 libsamba-passdb0-32bit-4.2.4-27.1 libsamba-passdb0-debuginfo-32bit-4.2.4-27.1 libsamba-policy0-32bit-4.2.4-27.1 libsamba-policy0-debuginfo-32bit-4.2.4-27.1 libsamba-util0-32bit-4.2.4-27.1 libsamba-util0-debuginfo-32bit-4.2.4-27.1 libsamdb0-32bit-4.2.4-27.1 libsamdb0-debuginfo-32bit-4.2.4-27.1 libsmbclient-raw0-32bit-4.2.4-27.1 libsmbclient-raw0-debuginfo-32bit-4.2.4-27.1 libsmbclient0-32bit-4.2.4-27.1 libsmbclient0-debuginfo-32bit-4.2.4-27.1 libsmbconf0-32bit-4.2.4-27.1 libsmbconf0-debuginfo-32bit-4.2.4-27.1 libsmbldap0-32bit-4.2.4-27.1 libsmbldap0-debuginfo-32bit-4.2.4-27.1 libtevent-util0-32bit-4.2.4-27.1 libtevent-util0-debuginfo-32bit-4.2.4-27.1 libwbclient0-32bit-4.2.4-27.1 libwbclient0-debuginfo-32bit-4.2.4-27.1 samba-32bit-4.2.4-27.1 samba-client-32bit-4.2.4-27.1 samba-client-debuginfo-32bit-4.2.4-27.1 samba-debuginfo-32bit-4.2.4-27.1 samba-libs-32bit-4.2.4-27.1 samba-libs-debuginfo-32bit-4.2.4-27.1 samba-winbind-32bit-4.2.4-27.1 samba-winbind-debuginfo-32bit-4.2.4-27.1 - openSUSE Leap 42.1 (noarch): samba-doc-4.2.4-27.1 References: https://www.suse.com/security/cve/CVE-2017-2619.html https://bugzilla.suse.com/1019416 https://bugzilla.suse.com/1024416 https://bugzilla.suse.com/1027147 https://bugzilla.suse.com/993692 https://bugzilla.suse.com/993707 -- To unsubscribe, e-mail: opensuse-security-announce+unsubscribe(a)opensuse.org For additional commands, e-mail: opensuse-security-announce+help(a)opensuse.org

1 0