November 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2015:2016-1: moderate: Security update for ntp
by opensuse-security＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Security Update: Security update for ntp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2016-1 Rating: moderate References: #951608 Cross-References: CVE-2015-7691 CVE-2015-7692 CVE-2015-7701 CVE-2015-7702 CVE-2015-7703 CVE-2015-7704 CVE-2015-7705 CVE-2015-7848 CVE-2015-7849 CVE-2015-7850 CVE-2015-7851 CVE-2015-7852 CVE-2015-7853 CVE-2015-7854 CVE-2015-7855 CVE-2015-7871 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 16 vulnerabilities is now available. Description: This ntp update provides the following security and non security fixes: - Update to 4.2.8p4 to fix several security issues (bsc#951608): * CVE-2015-7871: NAK to the Future: Symmetric association authentication bypass via crypto-NAK * CVE-2015-7855: decodenetnum() will ASSERT botch instead of returning FAIL on some bogus values * CVE-2015-7854: Password Length Memory Corruption Vulnerability * CVE-2015-7853: Invalid length data provided by a custom refclock driver could cause a buffer overflow * CVE-2015-7852 ntpq atoascii() Memory Corruption Vulnerability * CVE-2015-7851 saveconfig Directory Traversal Vulnerability * CVE-2015-7850 remote config logfile-keyfile * CVE-2015-7849 trusted key use-after-free * CVE-2015-7848 mode 7 loop counter underrun * CVE-2015-7701 Slow memory leak in CRYPTO_ASSOC * CVE-2015-7703 configuration directives "pidfile" and "driftfile" should only be allowed locally * CVE-2015-7704, CVE-2015-7705 Clients that receive a KoD should validate the origin timestamp field * CVE-2015-7691, CVE-2015-7692, CVE-2015-7702 Incomplete autokey data packet length checks * obsoletes ntp-memlock.patch. - Add a controlkey line to /etc/ntp.conf if one does not already exist to allow runtime configuuration via ntpq. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-767=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ntp-4.2.8p4-9.2 ntp-debuginfo-4.2.8p4-9.2 ntp-debugsource-4.2.8p4-9.2 ntp-doc-4.2.8p4-9.2 References: https://www.suse.com/security/cve/CVE-2015-7691.html https://www.suse.com/security/cve/CVE-2015-7692.html https://www.suse.com/security/cve/CVE-2015-7701.html https://www.suse.com/security/cve/CVE-2015-7702.html https://www.suse.com/security/cve/CVE-2015-7703.html https://www.suse.com/security/cve/CVE-2015-7704.html https://www.suse.com/security/cve/CVE-2015-7705.html https://www.suse.com/security/cve/CVE-2015-7848.html https://www.suse.com/security/cve/CVE-2015-7849.html https://www.suse.com/security/cve/CVE-2015-7850.html https://www.suse.com/security/cve/CVE-2015-7851.html https://www.suse.com/security/cve/CVE-2015-7852.html https://www.suse.com/security/cve/CVE-2015-7853.html https://www.suse.com/security/cve/CVE-2015-7854.html https://www.suse.com/security/cve/CVE-2015-7855.html https://www.suse.com/security/cve/CVE-2015-7871.html https://bugzilla.suse.com/951608

1 0

openSUSE-RU-2015:2015-1: moderate: Recommended update for suse-xsl-stylesheets
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for suse-xsl-stylesheets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2015-1 Rating: moderate References: #951717 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for suse-xsl-stylesheet provides the latest stable release 2.0.3.1 with various fixes and improvements (boo#951717): - Stylesheets: + PDF: Fixed Admonition titles with normal font weight + PDF: Fixed Product name/version displayed on cover and in footer of DocBook-5-generated books + PDF: Do not generate transparent text in CJK books + XHTML: Bugzilla links are only generated where necessary + XHTML: Make callouts uncopyable + XHTML: Fix display of screens and long commands in screen Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-758=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): suse-xsl-stylesheets-2.0.3.1-6.2 References: https://bugzilla.suse.com/951717

1 0

openSUSE-RU-2015:2014-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2014-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for multipath-tools fixes the following issues: - Fixes for md_monitor on zFCP (FATE#319070): + strict loop timings + multipathd: fixup a crash when invoking CLI commands + multipathd: implement 'show map $map format $format Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-763=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kpartx-0.5.0-50.1 kpartx-debuginfo-0.5.0-50.1 multipath-tools-0.5.0-50.1 multipath-tools-debuginfo-0.5.0-50.1 multipath-tools-debugsource-0.5.0-50.1 multipath-tools-devel-0.5.0-50.1 References:

1 0

openSUSE-RU-2015:2012-1: moderate: Recommended update for util-linux
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for util-linux ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2012-1 Rating: moderate References: #931634 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the following functionality for util-linux: - losetup: Add support for setting logical blocksizes (bsc#931634, FATE#319010) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-760=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libblkid-devel-2.25-12.2 libblkid1-2.25-12.2 libblkid1-debuginfo-2.25-12.2 libmount-devel-2.25-12.2 libmount1-2.25-12.2 libmount1-debuginfo-2.25-12.2 libsmartcols-devel-2.25-12.2 libsmartcols1-2.25-12.2 libsmartcols1-debuginfo-2.25-12.2 libuuid-devel-2.25-12.2 libuuid1-2.25-12.2 libuuid1-debuginfo-2.25-12.2 python-libmount-2.25-12.5 python-libmount-debuginfo-2.25-12.5 python-libmount-debugsource-2.25-12.5 util-linux-2.25-12.2 util-linux-debuginfo-2.25-12.2 util-linux-debugsource-2.25-12.2 util-linux-systemd-2.25-12.1 util-linux-systemd-debuginfo-2.25-12.1 util-linux-systemd-debugsource-2.25-12.1 uuidd-2.25-12.1 uuidd-debuginfo-2.25-12.1 - openSUSE Leap 42.1 (x86_64): libblkid-devel-32bit-2.25-12.2 libblkid1-32bit-2.25-12.2 libblkid1-debuginfo-32bit-2.25-12.2 libmount-devel-32bit-2.25-12.2 libmount1-32bit-2.25-12.2 libmount1-debuginfo-32bit-2.25-12.2 libuuid-devel-32bit-2.25-12.2 libuuid1-32bit-2.25-12.2 libuuid1-debuginfo-32bit-2.25-12.2 - openSUSE Leap 42.1 (noarch): util-linux-lang-2.25-12.2 References: https://bugzilla.suse.com/931634

1 0

openSUSE-RU-2015:2011-1: moderate: Recommended update for openssl
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for openssl ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2011-1 Rating: moderate References: #952871 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openssl fixes the following issue: - Avoid running OPENSSL_config twice. This avoids breaking engine loading. (bsc#952871) - openssl.keyring: Replaced with correct release engineer key Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-755=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libopenssl-devel-1.0.1i-6.1 libopenssl1_0_0-1.0.1i-6.1 libopenssl1_0_0-debuginfo-1.0.1i-6.1 libopenssl1_0_0-hmac-1.0.1i-6.1 openssl-1.0.1i-6.1 openssl-debuginfo-1.0.1i-6.1 openssl-debugsource-1.0.1i-6.1 - openSUSE Leap 42.1 (x86_64): libopenssl-devel-32bit-1.0.1i-6.1 libopenssl1_0_0-32bit-1.0.1i-6.1 libopenssl1_0_0-debuginfo-32bit-1.0.1i-6.1 libopenssl1_0_0-hmac-32bit-1.0.1i-6.1 - openSUSE Leap 42.1 (noarch): openssl-doc-1.0.1i-6.1 References: https://bugzilla.suse.com/952871

1 0

openSUSE-RU-2015:2010-1: moderate: Recommended update for sssd
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for sssd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2010-1 Rating: moderate References: #926961 #939249 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for sssd fixes the following issue: - Do not permit user session before SSSD starts (boo#926961). - Redo fix for boo#939249 by using rpm Requires. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-757=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libipa_hbac-devel-1.11.5.1-7.1 libipa_hbac0-1.11.5.1-7.1 libipa_hbac0-debuginfo-1.11.5.1-7.1 libsss_idmap-devel-1.11.5.1-7.1 libsss_idmap0-1.11.5.1-7.1 libsss_idmap0-debuginfo-1.11.5.1-7.1 libsss_nss_idmap-devel-1.11.5.1-7.1 libsss_nss_idmap0-1.11.5.1-7.1 libsss_nss_idmap0-debuginfo-1.11.5.1-7.1 libsss_sudo-1.11.5.1-7.1 libsss_sudo-debuginfo-1.11.5.1-7.1 python-ipa_hbac-1.11.5.1-7.1 python-ipa_hbac-debuginfo-1.11.5.1-7.1 python-sss_nss_idmap-1.11.5.1-7.1 python-sss_nss_idmap-debuginfo-1.11.5.1-7.1 python-sssd-config-1.11.5.1-7.1 python-sssd-config-debuginfo-1.11.5.1-7.1 sssd-1.11.5.1-7.1 sssd-ad-1.11.5.1-7.1 sssd-ad-debuginfo-1.11.5.1-7.1 sssd-debuginfo-1.11.5.1-7.1 sssd-debugsource-1.11.5.1-7.1 sssd-ipa-1.11.5.1-7.1 sssd-ipa-debuginfo-1.11.5.1-7.1 sssd-krb5-1.11.5.1-7.1 sssd-krb5-common-1.11.5.1-7.1 sssd-krb5-common-debuginfo-1.11.5.1-7.1 sssd-krb5-debuginfo-1.11.5.1-7.1 sssd-ldap-1.11.5.1-7.1 sssd-ldap-debuginfo-1.11.5.1-7.1 sssd-proxy-1.11.5.1-7.1 sssd-proxy-debuginfo-1.11.5.1-7.1 sssd-tools-1.11.5.1-7.1 sssd-tools-debuginfo-1.11.5.1-7.1 - openSUSE Leap 42.1 (x86_64): sssd-32bit-1.11.5.1-7.1 sssd-debuginfo-32bit-1.11.5.1-7.1 References: https://bugzilla.suse.com/926961 https://bugzilla.suse.com/939249

1 0

openSUSE-RU-2015:2009-1: Recommended udpate for libosinfo
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended udpate for libosinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2009-1 Rating: low References: #946157 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libosinfo fixes the following issue: - Fix mouse cursor in Guest OS installation in KVM Mode (boo#946157). - Use correct name for openSUSE Leap 42.1 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-752=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libosinfo-0.2.12-10.1 libosinfo-1_0-0-0.2.12-10.1 libosinfo-1_0-0-debuginfo-0.2.12-10.1 libosinfo-debuginfo-0.2.12-10.1 libosinfo-debugsource-0.2.12-10.1 libosinfo-devel-0.2.12-10.1 typelib-1_0-Libosinfo-1_0-0.2.12-10.1 - openSUSE Leap 42.1 (noarch): libosinfo-lang-0.2.12-10.1 References: https://bugzilla.suse.com/946157

1 0

openSUSE-RU-2015:2008-1: moderate: Recommended update for openCryptoki
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for openCryptoki ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2008-1 Rating: moderate References: #953347 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for openCryptoki fixes the following issue: - Get a new ldap handle for each session opened in the icsf token, once the user has authenticated. (boo#953347) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-754=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openCryptoki-3.2-4.1 openCryptoki-debuginfo-3.2-4.1 openCryptoki-debugsource-3.2-4.1 openCryptoki-devel-3.2-4.1 - openSUSE Leap 42.1 (x86_64): openCryptoki-64bit-3.2-4.1 openCryptoki-64bit-debuginfo-3.2-4.1 - openSUSE Leap 42.1 (i586): openCryptoki-32bit-3.2-4.1 openCryptoki-32bit-debuginfo-3.2-4.1 References: https://bugzilla.suse.com/953347

1 0

openSUSE-RU-2015:2007-1: moderate: Recommended update for md_monitor
by maintenance＠opensuse.org 18 Nov '15

18 Nov '15

openSUSE Recommended Update: Recommended update for md_monitor ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2007-1 Rating: moderate References: #937340 #951211 #953510 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for md_monitor provides version 6.2 with various fixes and improvements: - Include zFCP support (FATE#319070) - Update scripts for zFCP - Set 'timeout' DASD attribute correctly on newer kernels - Include scripts to setup root on MD - Set 'failfast' attribute correctly on newer kernels - Call 'mdadm --wait' when shutdown array (boo#951211) - Include workaround for boo#953510 - Open device nodes read-only (boo#937340) - Use curl instead of wget - Fix I/O timeout handling to work with newer kernel Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-753=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): md_monitor-6.2-3.1 md_monitor-debuginfo-6.2-3.1 md_monitor-debugsource-6.2-3.1 References: https://bugzilla.suse.com/937340 https://bugzilla.suse.com/951211 https://bugzilla.suse.com/953510

1 0

openSUSE-RU-2015:2004-1: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 17 Nov '15

17 Nov '15

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2004-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This releases notes update for openSUSE Leap 42.1 adds notes on: - ndds hang - the udev network interface naming scheme Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-751=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): release-notes-openSUSE-42.1.20151109-3.1 References:

1 0