December 2015 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2015:2198-1: moderate: Recommended update for NetworkManager-openvpn
by maintenance＠opensuse.org 04 Dec '15

04 Dec '15

openSUSE Recommended Update: Recommended update for NetworkManager-openvpn ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2198-1 Rating: moderate References: #956215 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for NetworkManager-openvpn fixes the following issues: - Install the %{_localstatedir}/lib/openvpn and package it for NM-openvpn to use when run as unpriviledged user (boo#956215). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-855=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): NetworkManager-openvpn-1.0.6-3.1 NetworkManager-openvpn-debuginfo-1.0.6-3.1 NetworkManager-openvpn-debugsource-1.0.6-3.1 NetworkManager-openvpn-gnome-1.0.6-3.1 NetworkManager-openvpn-gnome-debuginfo-1.0.6-3.1 - openSUSE Leap 42.1 (noarch): NetworkManager-openvpn-lang-1.0.6-3.1 References: https://bugzilla.suse.com/956215

1 0

openSUSE-RU-2015:2197-1: moderate: Recommended update for docker
by maintenance＠opensuse.org 04 Dec '15

04 Dec '15

openSUSE Recommended Update: Recommended update for docker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2197-1 Rating: moderate References: #956434 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for docker provides version 1.9.1 with various fixes and improvements (boo#956434): - Runtime: + Do not prevent daemon from booting if images could not be restored + Force ipc mount to unmount on daemon shutdown/init + Turn ipc unmount errors into warnings + Fix `docker stats` performance regression + Clarify cryptic error message upon `docker logs` if `--log-driver=none + Fix seldom panics + Fix opq whiteouts problems for files with dot prefix + devicemapper: Try defaulting to xfs instead of ext4 for performance reasons + devicemapper: Fix displayed fs in docker info + Selinux: only relabel if user requested so with the `z` option + Do not make network calls when normalizing names - Client: + Fix `docker login` on windows + Fix bug with `docker inspect` output when not connected to daemon + Fix `docker inspect -f {{.hostconfig.dns}} somecontainer - Builder: + Fix regression with symlink behavior in add/copy - Networking: + Allow passing a network id as an argument for `--net + Fix connect to host and prevent disconnect from host for `host` network + Fix `--fixed-cidr` issue when gateway ip falls in ip-range and ip-range is not the first block in the network + Restore deterministic `ipv6` generation from `mac` address on default `bridge` network + Allow port-mapping only for endpoints created on docker run + Fixed an endpoint delete issue with a possible stale sbox - Distribution: + Correct parent chain in v2 push when v1compatibility files on the disk are inconsistent Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-854=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-1.9.1-7.1 docker-debuginfo-1.9.1-7.1 docker-debugsource-1.9.1-7.1 - openSUSE Leap 42.1 (noarch): docker-bash-completion-1.9.1-7.1 docker-test-1.9.1-7.1 docker-zsh-completion-1.9.1-7.1 References: https://bugzilla.suse.com/956434

1 0

openSUSE-RU-2015:2196-1: moderate: Recommended update for btrfsprogs
by maintenance＠opensuse.org 04 Dec '15

04 Dec '15

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2196-1 Rating: moderate References: #938017 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 4.3.1 for btrfsprogs: * fixes * device delete: recognize 'missing' again * mkfs: long names are not trimmed when doing ssd check * support partitioned loop devices * other * replace several mallocs with on-stack variables * more memory allocation failure handling * add tests for bugs fixed * cmd-device: switch to new message printing helpers * minor code cleanups - update to 4.3 * mkfs * mixed mode is not forced for filesystems smaller than 1GiB * mixed mode broken with mismatching sectorsize and nodesize, fixed * print version info earlier * print devices sorted by id * do not truncate target image with --rootsize * fi usage: * don't print global block reserve * print device id * minor output tuning * other cleanups * calc-size: * div-by-zero fix on an empty filesystem * fix crash * bugfixes: * more superblock sanity checks * consistently round size of all devices down to sectorsize * misc leak fixes * convert: don't try to rollback with a half-deleted ext2_saved subvolume * other: * check: add progress indicator * scrub: enahced error message * show-super: read superblock from a given offset * add README * docs: update manual page for mkfs.btrfs, btrfstune, balance, convert and inspect-internal * build: optional build with more warnings (W=...) * build: better support for static checkers * build: html output of documentation * pretty-print: last_snapshot for root_item * pretty-print: stripe dev uuid * error reporting wrappers, introduced and example use * refactor open_file_or_dir * other docs and help updates * testing: * test for nodes crossing stripes * test for broken 'subvolume sync' * basic tests for mkfs, raid option combinations * basic tests for fuzzed images (check) * command intrumentation (eg valgrind) * print commands if requested * add README for tests - update to 4.2.3 - subvol sync: make it actually work again - scanning: do not scan already discovered filesystems (minor optimization) - convert: better error message in case the filesystem is not finalized - restore: off-by-one symlink path check fix - update to 4.2.2 - fi label: use fallback if the label ioctl is not available - convert: check nodesize constraints against commandline features (-O) - scrub: report status 'running' until all devices are finished - device scanning might crash in some scenarios - fi usage: print summary for non-root users - update to 4.2.1 - fix an off-by-one error in cross-stripe boundary check - convert: don't write uninitialized data to image - image: don't loop with option -t0 - image: don't create threads if compression is not requested - version 4.2 * enhancements: * mkfs: do not create extra single chunks on multiple devices * resize: try to guess the minimal size, 'inspect min-dev-size' * qgroup assign: add option to schedule rescan * chunk-recover: be more verbose about the scanning process * fixes: * check: * find stripes crossing stripe boundary -- created by convert * print correct range for file hole when there are no extents and learn how to fix it * replace: more sanity checks * convert: concurrency fixes related to reporting progress * find-root: option -a will not skip the current root anymore * subvol list: fix occasional crash * do not create stripes crossing stripe boundary * build: * fixes for musl libc * preliminary support for android (not working yet, more code changes needed) * new EXTRA_CFLAGS and EXTRA_LDFLAGS * other: * lots of cleanups * tests: lots of updates, new tests, framework improvements * documentation updates * debugging: print-tree shows stripe length - version 4.1.2 - mkfs: bugfix, previous version does not create entierly correct filesystem (has to be recreated) (bsc#938017) - version 4.1.1 * bugfixes - defrag: threshold overflow fix - fsck: - check if items fit into the leaf space - fix wrong nbytes - mkfs: - create only desired block groups for single device - preparatory work for fix on multiple devices * enhancements - new alias for 'device delete': 'device remove' * other - fix compilation on old gcc (4.3) - documentation updates - debug-tree: print nbytes - test: image for corrupted nbytes - corupt-block: let it kill nbytes - version 4.1 * bugfixes - fsck.btrfs: no bash-isms - bugzilla 97171: invalid memory access (with tests) - receive: - cloning works with --chroot - capabilities not lost - mkfs: do not try to register bare file images - option --help accepted by the standalone utilities * enhancements - corrupt block: ability to remove csums - mkfs: - warn if metadata redundancy is lower than for data - options to make the output quiet (only errors) - mixed case names of raid profiles accepted - rework the output: - more comprehensive, 'key: value' format - subvol: - show: - print received uuid - update the output - new options to specify size units - sync: - grab all deleted ids and print them as they're removed, previous implementation only checked if there are any to be deleted - change in command semantics - scrub: print timestamps in days HMS format - receive: - can specify mount point, do not rely on /proc - can work inside subvolumes - send: - new option to send stream without data (NO_FILE_DATA) - convert: - specify incompat features on the new fs - qgroup: - show: distinguish no limits and 0 limit value - limit: ability to clear the limit - help for 'btrfs' is shorter, 1st level command overview - debug tree: print key names according to their C name * new - rescure zero-log - btrfsune: - rewrite uuid on a filesystem image - new option to turn on NO_HOLES incompat feature * deprecated - standalone btrfs-zero-log * other - testing framework updates - uuid rewrite test - btrfstune feature setting test - zero-log tests - more testing image formats - manual page updates - ioctl.h synced with current kernel uapi version - convert: preparatory works for more filesystems (reiserfs pending) - use static buffers for path handling where possible - add new helpers for send uilts that check memory allocations, switch all users, deprecate old helpers - Makefile: fix build dependency generation - map-logical: make it work again Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2015-852=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): btrfsprogs-4.3.1-10.1 btrfsprogs-debuginfo-4.3.1-10.1 btrfsprogs-debugsource-4.3.1-10.1 libbtrfs-devel-4.3.1-10.1 libbtrfs0-4.3.1-10.1 libbtrfs0-debuginfo-4.3.1-10.1 References: https://bugzilla.suse.com/938017

1 0

openSUSE-RU-2015:2181-1: moderate: Recommended update for signing-party
by maintenance＠opensuse.org 03 Dec '15

03 Dec '15

openSUSE Recommended Update: Recommended update for signing-party ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2181-1 Rating: moderate References: #955986 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: signing-party was updated to fix the caff command. The following bug were fixed: * boo#955986: caff 2.x was using hash slices which were introduced in Perl 5.20 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-850=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): signing-party-2.1-6.1 References: https://bugzilla.suse.com/955986

1 0

openSUSE-RU-2015:2179-1: moderate: Recommended update for python3-websockets
by maintenance＠opensuse.org 03 Dec '15

03 Dec '15

openSUSE Recommended Update: Recommended update for python3-websockets ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2179-1 Rating: moderate References: #956420 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 2.7 for python3-websockets: Release 2.7 (boo#956420) * Added compatibility with python 3.5. * Refreshed documentation. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-849=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python3-websockets-2.7-3.1 References: https://bugzilla.suse.com/956420

1 0

openSUSE-RU-2015:2178-1: moderate: Recommended update for julia
by maintenance＠opensuse.org 03 Dec '15

03 Dec '15

openSUSE Recommended Update: Recommended update for julia ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2178-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update provides version 0.4.1 of julia - Version bump to 0.4.1. * Bugfix release, no changelog available. - Add missing runtime dependency on libpcre2-8-0 - Version bump to 0.4.0, see news.md for details. - Remove unneeded build dependencies. - Version bump to 0.4.0~rc4. * Bugfix and backports towards 0.4 release. no changelog available. - Add julia-compat package without cpu optimizations - Version bump to 0.4.0~rc3. * Bugfix and backports towards 0.4 release. no changelog available. - Version bump to 0.4.0~rc2. * Bugfix and backports towards 0.4 release. no changelog available. - Llvm 3.3 will be bundle for 0.4 branch. * Llvm 3.3 will be bundle until upstream change the supported version. As it can be seen in upstream issues #9336 and #13209, there are still many problems related with LLVM 3.5, regarding both the build process and the JIT compiler used by Julia. Thus, it is better for now stick with LLVM 3.3. For more information, see: https://github.com/JuliaLang/julia/issues/13208 https://github.com/JuliaLang/julia/issues/9336 - Version bump to 0.4 branch (0.4.0~rc1). * This version needs utf8proc > 1.3. since it is not available in openSUSE yet, it was decided to bundle the selected upstream version. * This version seems to build correctly with both llvm 3.5 and 3.7, which are the versions available in 13.2 and Tumbleweed. Thus, it was decided to build julia against system LLVM. * The build process now requires libgit2 and pcre2. * The changes in .spec were obtained from fedora's julia-nightlies.spec. - Changelog of verion 0.4.0~rc1. * The complete list of changes related to this release candidate can be seen in: https://github.com/JuliaLang/julia/issues?q=milestone%3A0.4.0+is%3Aclosed * Note: a changelog with the notable changes between 0.3 and 0.4 versions are expected in the Julia 0.4 release announcement. - Revert: "build julia using llvm-3_3 package" (revision 15) * The llvm-3_3 package is conflicting with other packages that depends on llvm and it turns out that it will need a huge amount of work to modify every package spec that depends on llvm to circumvent this problem. Thus, by now, the safest approach is just bundle the supported llvm version in julia package. - Update to version 0.3.11 * Bugfix release, no changelog available - Drop obsolete julia-disable-llvm-timestamps.patch - Fix compiler names (clang++ -> clang++-3.3 in llvm-3_3-clang) - Build julia using llvm-3_3 package. - Use build-in llvm 3.3 - Disable llvm timestamps * Julia-disable-llvm-timestamps.patch - Drop obsolete julia_fix-building-with-mcjit-llvm.patch - Set required memory to 4 gb - Update to version 0.3.10 * Bugfix release, no changelog available - Update to version 0.3.9 * Bugfix release, no changelog available - Update to version 0.3.8 * Bugfix release, no changelog available - Update to version 0.3.7 * Bugfix release, no changelog available - Update to version 0.3.6 * Bugfix release, no changelog available - Update to version 0.3.5 * Bugfix release, no changelog available - Update to version 0.3.4 * Bugfix release, no changelog available - Set use_system_libm=0 * If use_system_libm is set to 1, then julia will not use openlibm. - Set march=pentium4 (32 bits) / march=core2 (64 bits) - Add libarpack2 to the dependency list - Remove upstreamed julia-upstream-9221.patch - Add julia-upstream-9221.patch to temporarily fix the upstream issue: https://github.com/JuliaLang/julia/issues/8690 - Fix bug related with build architecture (julia_cpu_target) that was added by revision 15 of science repo. - Deduce julia_target_arch from rpm build flags, specifying just JULIA_CPU_TARGET=core2 is not portable - Update to version 0.3.3 * Bugfix release, no changelog available - Update to version 0.3.2 * Bugfix release, no changelog available - Update to version 0.3.1 * Bugfix release, no changelog available - Update to version 0.3.0 * See included news.md for details - Add _service in disabled mode for rmath and libuv sources - Update to version 0.3.0-rc4 - Update to version 0.3.0-rc3 - Update to version 0.3.0-rc2 - Spec file cleanup - Use system openlibm, openspecfun, utf8proc - Use fftw3 with multithreading support - Move build parameters to juliabuildopts file - Move code examples to separate package - Julia 0.3.0-rc1 (0.2.0+git4218.gc5acc8d) - Version bump to 0.4.1. * Bugfix release, no changelog available. - Add missing runtime dependency on libpcre2-8-0 - Version bump to 0.4.0, see news.md for details. - Remove unneeded build dependencies. - Version bump to 0.4.0~rc4. * Bugfix and backports towards 0.4 release. no changelog available. - Add julia-compat package without cpu optimizations - Version bump to 0.4.0~rc3. * Bugfix and backports towards 0.4 release. no changelog available. - Version bump to 0.4.0~rc2. * Bugfix and backports towards 0.4 release. no changelog available. - Llvm 3.3 will be bundle for 0.4 branch. * Llvm 3.3 will be bundle until upstream change the supported version. As it can be seen in upstream issues #9336 and #13209, there are still many problems related with LLVM 3.5, regarding both the build process and the JIT compiler used by Julia. Thus, it is better for now stick with LLVM 3.3. For more information, see: https://github.com/JuliaLang/julia/issues/13208 https://github.com/JuliaLang/julia/issues/9336 - Version bump to 0.4 branch (0.4.0~rc1). * This version needs utf8proc > 1.3. since it is not available in openSUSE yet, it was decided to bundle the selected upstream version. * This version seems to build correctly with both llvm 3.5 and 3.7, which are the versions available in 13.2 and Tumbleweed. Thus, it was decided to build julia against system LLVM. * The build process now requires libgit2 and pcre2. * The changes in .spec were obtained from fedora's julia-nightlies.spec. - Changelog of verion 0.4.0~rc1. * The complete list of changes related to this release candidate can be seen in: https://github.com/JuliaLang/julia/issues?q=milestone%3A0.4.0+is%3Aclosed * Note: a changelog with the notable changes between 0.3 and 0.4 versions are expected in the Julia 0.4 release announcement. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-848=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): julia-0.4.1-4.1 julia-debuginfo-0.4.1-4.1 julia-debugsource-0.4.1-4.1 julia-devel-0.4.1-4.1 julia-devel-debuginfo-0.4.1-4.1 - openSUSE Leap 42.1 (x86_64): julia-compat-0.4.1-4.1 julia-compat-debuginfo-0.4.1-4.1 julia-compat-debugsource-0.4.1-4.1 julia-compat-devel-0.4.1-4.1 julia-compat-devel-debuginfo-0.4.1-4.1 - openSUSE Leap 42.1 (noarch): julia-doc-0.4.1-4.1 julia-examples-0.4.1-4.1 References:

1 0

openSUSE-RU-2015:2173-1: Recommended update for NetworkManager
by maintenance＠opensuse.org 02 Dec '15

02 Dec '15

openSUSE Recommended Update: Recommended update for NetworkManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2015:2173-1 Rating: low References: #957014 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: NetworkManager was rebuilt against the latest release of ppp, which was a version update. (bsc#957014) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2015-847=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): NetworkManager-0.9.8.8-13.1 NetworkManager-debuginfo-0.9.8.8-13.1 NetworkManager-debugsource-0.9.8.8-13.1 NetworkManager-devel-0.9.8.8-13.1 libnm-glib-vpn1-0.9.8.8-13.1 libnm-glib-vpn1-debuginfo-0.9.8.8-13.1 libnm-glib4-0.9.8.8-13.1 libnm-glib4-debuginfo-0.9.8.8-13.1 libnm-util2-0.9.8.8-13.1 libnm-util2-debuginfo-0.9.8.8-13.1 typelib-1_0-NMClient-1_0-0.9.8.8-13.1 typelib-1_0-NetworkManager-1_0-0.9.8.8-13.1 - openSUSE 13.1 (x86_64): NetworkManager-devel-32bit-0.9.8.8-13.1 libnm-glib-vpn1-32bit-0.9.8.8-13.1 libnm-glib-vpn1-debuginfo-32bit-0.9.8.8-13.1 libnm-glib4-32bit-0.9.8.8-13.1 libnm-glib4-debuginfo-32bit-0.9.8.8-13.1 libnm-util2-32bit-0.9.8.8-13.1 libnm-util2-debuginfo-32bit-0.9.8.8-13.1 - openSUSE 13.1 (noarch): NetworkManager-lang-0.9.8.8-13.1 References: https://bugzilla.suse.com/957014

1 0

openSUSE-SU-2015:2165-1: moderate: Recommended update for dracut
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

openSUSE Security Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2165-1 Rating: moderate References: #935338 #935563 #952491 #953035 #953361 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for dracut fixes the following issues: - Skip ibft setup via dhcp if dhcp ip is 0.0.0.0 (boo#953361) Added 0312-iscsi-skip-ibft-invalid-dhcp.patch - Modify 0169-enabled-warning-for-failed-kernel-modules-per-defaul.patch - Add notice (boo#952491) - Refresh patches with line offsets: M 0146-dracut.sh-corrected-logfile-check.patch M 0182-fix_add_drivers_hang.patch M 0183-kernel-modules-Fix-storage-module-selection-for-sdhc.patch - Modify 0181-load-xhci-pci.patch: - Add hid-logitech-hidpp - Ignore errors for xhci-pci, ehci-platform and hid-logitech-hidpp - Boo#952491, boo#935563 and boo#953035 - Add 0311-less_pointless_module_errors.patch (boo#952491 and boo#935563) - Don't warn if installing built-in modules fails - Don't print the error message twice - Modify 0144-90crypt-fixed-crypttab_contains-to-also-work-with-de.patch and 0169-Enabled-Warning-for-failed-kernel-modules-per-defaul.patch - Fixes boo#935338 - Use mktemp instead of hardcoded filenames, possible vulnerability Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-846=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dracut-037-68.1 dracut-debuginfo-037-68.1 dracut-debugsource-037-68.1 dracut-fips-037-68.1 References: https://bugzilla.suse.com/935338 https://bugzilla.suse.com/935563 https://bugzilla.suse.com/952491 https://bugzilla.suse.com/953035 https://bugzilla.suse.com/953361

1 0

openSUSE-SU-2015:2164-1: Security update for znc
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2164-1 Rating: low References: #956254 Cross-References: CVE-2014-9403 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Znc was updated to 1.6.2 to fix one security issue. The following vulnerability was fixed: * CVE-2014-9403: Remote unauthenticated users could cause denial of service via channel creation. [boo#956254] Also contains all bug fixes in the 1.6.2 release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2015-845=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): znc-1.6.2-8.1 znc-debuginfo-1.6.2-8.1 znc-debugsource-1.6.2-8.1 znc-devel-1.6.2-8.1 znc-perl-1.6.2-8.1 znc-perl-debuginfo-1.6.2-8.1 znc-python3-1.6.2-8.1 znc-python3-debuginfo-1.6.2-8.1 znc-tcl-1.6.2-8.1 znc-tcl-debuginfo-1.6.2-8.1 References: https://www.suse.com/security/cve/CVE-2014-9403.html https://bugzilla.suse.com/956254

1 0

openSUSE-SU-2015:2163-1: Security update for znc
by opensuse-security＠opensuse.org 02 Dec '15

02 Dec '15

openSUSE Security Update: Security update for znc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2015:2163-1 Rating: low References: #956254 Cross-References: CVE-2014-9403 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: Znc was updated to 1.6.2 to fix one security issue. The following vulnerability was fixed: * CVE-2014-9403: Remote unauthenticated users could cause denial of service via channel creation. [boo#956254] Also contains all bug fixes in the 1.6.2 release. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2015-845=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): znc-1.6.2-9.1 znc-devel-1.6.2-9.1 znc-perl-1.6.2-9.1 znc-python3-1.6.2-9.1 znc-tcl-1.6.2-9.1 References: https://www.suse.com/security/cve/CVE-2014-9403.html https://bugzilla.suse.com/956254

1 0