November 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2722-1: moderate: Security update for jasper
by opensuse-security＠opensuse.org 04 Nov '16

04 Nov '16

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2722-1 Rating: moderate References: #1005084 #1005090 #1005242 #1006591 #1006593 #1006597 #1006598 #1006599 #392410 #941919 #942553 #968373 Cross-References: CVE-2008-3522 CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-2116 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8886 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 14 vulnerabilities is now available. Description: This update for jasper to version 1.900.14 fixes several issues. These security issues were fixed: - CVE-2008-3522: Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer might have allowed context-dependent attackers to have an unknown impact via vectors related to the mif_hdr_put function and use of vsprintf (bsc#392410) - CVE-2015-5203: Double free corruption in JasPer JPEG-2000 implementation (bsc#941919). - CVE-2015-5221: Use-after-free (and double-free) in Jasper JPEG-200 (bsc#942553). - CVE-2016-1577: Double free vulnerability in the jas_iccattrval_destroy function in JasPer allowed remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted ICC color profile in a JPEG 2000 image file, a different vulnerability than CVE-2014-8137 (bsc#968373). - CVE-2016-2116: Memory leak in the jas_iccprof_createfrombuf function in JasPer allowed remote attackers to cause a denial of service (memory consumption) via a crafted ICC color profile in a JPEG 2000 image file (bsc#968373) - CVE-2016-8690: Null pointer dereference in bmp_getdata triggered by crafted BMP image (bsc#1005084). - CVE-2016-8691, CVE-2016-8692: Missing range check on XRsiz and YRsiz fields of SIZ marker segment (bsc#1005090). - CVE-2016-8693: The memory stream interface allowed for a buffer size of zero. The case of a zero-sized buffer was not handled correctly, as it could lead to a double free (bsc#1005242). - CVE-2016-8880: Heap overflow in jpc_dec_cp_setfromcox() (bsc#1006591). - CVE-2016-8881: Heap overflow in jpc_getuint16() (bsc#1006593). - CVE-2016-8882: Null pointer access in jpc_pi_destroy (bsc#1006597). - CVE-2016-8883: Assert triggered in jpc_dec_tiledecode() (bsc#1006598). - CVE-2016-8886: Memory allocation failure in jas_malloc (jas_malloc.c) (bsc#1006599). For additional change description please have a look at the changelog. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1263=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): jasper-1.900.14-163.24.1 jasper-debuginfo-1.900.14-163.24.1 jasper-debugsource-1.900.14-163.24.1 libjasper-devel-1.900.14-163.24.1 libjasper1-1.900.14-163.24.1 libjasper1-debuginfo-1.900.14-163.24.1 - openSUSE 13.2 (x86_64): libjasper1-32bit-1.900.14-163.24.1 libjasper1-debuginfo-32bit-1.900.14-163.24.1 References: https://www.suse.com/security/cve/CVE-2008-3522.html https://www.suse.com/security/cve/CVE-2015-5203.html https://www.suse.com/security/cve/CVE-2015-5221.html https://www.suse.com/security/cve/CVE-2016-1577.html https://www.suse.com/security/cve/CVE-2016-2116.html https://www.suse.com/security/cve/CVE-2016-8690.html https://www.suse.com/security/cve/CVE-2016-8691.html https://www.suse.com/security/cve/CVE-2016-8692.html https://www.suse.com/security/cve/CVE-2016-8693.html https://www.suse.com/security/cve/CVE-2016-8880.html https://www.suse.com/security/cve/CVE-2016-8881.html https://www.suse.com/security/cve/CVE-2016-8882.html https://www.suse.com/security/cve/CVE-2016-8883.html https://www.suse.com/security/cve/CVE-2016-8886.html https://bugzilla.suse.com/1005084 https://bugzilla.suse.com/1005090 https://bugzilla.suse.com/1005242 https://bugzilla.suse.com/1006591 https://bugzilla.suse.com/1006593 https://bugzilla.suse.com/1006597 https://bugzilla.suse.com/1006598 https://bugzilla.suse.com/1006599 https://bugzilla.suse.com/392410 https://bugzilla.suse.com/941919 https://bugzilla.suse.com/942553 https://bugzilla.suse.com/968373

1 0

openSUSE-RU-2016:2717-1: Recommended update for wget
by maintenance＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Recommended Update: Recommended update for wget ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2717-1 Rating: low References: #1005091 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wget fixes the following issues: - Don't call xfree() on string returned by usr_error()! (boo#1005091) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1257=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): wget-1.16-4.13.1 wget-debuginfo-1.16-4.13.1 wget-debugsource-1.16-4.13.1 References: https://bugzilla.suse.com/1005091

1 0

openSUSE-RU-2016:2716-1: moderate: Recommended update for multipath-tools
by maintenance＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Recommended Update: Recommended update for multipath-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2716-1 Rating: moderate References: #979280 #980933 #983167 #991432 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for multipath-tools provides the following fixes: - Add 'wwn' and 'serial' keywords to weightedpath prioritizer. (bsc#991432) - Update multipath.rules to deal with partition devices. (bsc#979280) - Avoid potential memory overflow allocating polls in uxlsnr. - Correctly zero out cookie in libmultipath's dm_simplecmd. - Ensure multipathd enters IDLE mode before sleeping in checkerloop(). - Prevent multipathd from accessing configuration in IDLE mode. - Fix loss of the complete multipath map after single path loss. (bsc#980933) - Fix systemd build requirements. (bsc#983167) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1261=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kpartx-0.5.0-56.1 kpartx-debuginfo-0.5.0-56.1 multipath-tools-0.5.0-56.1 multipath-tools-debuginfo-0.5.0-56.1 multipath-tools-debugsource-0.5.0-56.1 multipath-tools-devel-0.5.0-56.1 References: https://bugzilla.suse.com/979280 https://bugzilla.suse.com/980933 https://bugzilla.suse.com/983167 https://bugzilla.suse.com/991432

1 0

openSUSE-SU-2016:2715-1: moderate: Security update for bash
by opensuse-security＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Security Update: Security update for bash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2715-1 Rating: moderate References: #1000396 #1001299 #976776 Cross-References: CVE-2016-0634 CVE-2016-7543 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: This update for bash fixes the following security issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables (bsc#1001299) - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in the prompt (bsc#1000396) This update also fixes the following bugs: - fix a crash found during debugging boo#971410 - boo#976776: crash if ~/.bash_history is empty (boo#976776) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1260=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bash-4.2-75.5.1 bash-debuginfo-4.2-75.5.1 bash-debugsource-4.2-75.5.1 bash-devel-4.2-75.5.1 bash-loadables-4.2-75.5.1 bash-loadables-debuginfo-4.2-75.5.1 libreadline6-6.2-75.5.1 libreadline6-debuginfo-6.2-75.5.1 readline-devel-6.2-75.5.1 - openSUSE 13.2 (x86_64): bash-debuginfo-32bit-4.2-75.5.1 libreadline6-32bit-6.2-75.5.1 libreadline6-debuginfo-32bit-6.2-75.5.1 readline-devel-32bit-6.2-75.5.1 - openSUSE 13.2 (noarch): bash-doc-4.2-75.5.1 bash-lang-4.2-75.5.1 readline-doc-6.2-75.5.1 References: https://www.suse.com/security/cve/CVE-2016-0634.html https://www.suse.com/security/cve/CVE-2016-7543.html https://bugzilla.suse.com/1000396 https://bugzilla.suse.com/1001299 https://bugzilla.suse.com/976776

1 0

openSUSE-RU-2016:2713-1: Recommended update for exiv2
by maintenance＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Recommended Update: Recommended update for exiv2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2713-1 Rating: low References: #964344 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for exiv2 fixes the following issues: - Fix crash in darktable. (boo#964344) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1256=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): exiv2-0.25-6.1 exiv2-debuginfo-0.25-6.1 exiv2-debugsource-0.25-6.1 libexiv2-14-0.25-6.1 libexiv2-14-debuginfo-0.25-6.1 libexiv2-devel-0.25-6.1 - openSUSE Leap 42.1 (x86_64): libexiv2-14-32bit-0.25-6.1 libexiv2-14-debuginfo-32bit-0.25-6.1 - openSUSE Leap 42.1 (noarch): exiv2-lang-0.25-6.1 References: https://bugzilla.suse.com/964344

1 0

openSUSE-SU-2016:2712-1: moderate: Security update for openslp
by opensuse-security＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Security Update: Security update for openslp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2712-1 Rating: moderate References: #1001600 #974655 #980722 #994989 Cross-References: CVE-2016-4912 CVE-2016-7567 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for openslp fixes two security issues and two bugs. The following vulnerabilities were fixed: - CVE-2016-4912: A remote attacker could have crashed the server with a large number of packages (bsc#980722) - CVE-2016-7567: A remote attacker could cause a memory corruption having unspecified impact (bsc#1001600) The following bugfix changes are included: - bsc#994989: Removed convenience code as changes bytes in the message buffer breaking the verification code - bsc#974655: Removed no longer needed slpd init file This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1262=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): openslp-2.0.0-17.1 openslp-debuginfo-2.0.0-17.1 openslp-debugsource-2.0.0-17.1 openslp-devel-2.0.0-17.1 openslp-server-2.0.0-17.1 openslp-server-debuginfo-2.0.0-17.1 - openSUSE Leap 42.1 (x86_64): openslp-32bit-2.0.0-17.1 openslp-debuginfo-32bit-2.0.0-17.1 References: https://www.suse.com/security/cve/CVE-2016-4912.html https://www.suse.com/security/cve/CVE-2016-7567.html https://bugzilla.suse.com/1001600 https://bugzilla.suse.com/974655 https://bugzilla.suse.com/980722 https://bugzilla.suse.com/994989

1 0

openSUSE-SU-2016:2711-1: moderate: Security update for libxml2
by opensuse-security＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Security Update: Security update for libxml2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2711-1 Rating: moderate References: #1005544 Cross-References: CVE-2016-4658 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libxml2 fixes the following issues: - CVE-2016-4658: Use after free via namespace node in XPointer ranges (bsc#1005544). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1259=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libxml2-2-2.9.1-22.1 libxml2-2-debuginfo-2.9.1-22.1 libxml2-debugsource-2.9.1-22.1 libxml2-devel-2.9.1-22.1 libxml2-tools-2.9.1-22.1 libxml2-tools-debuginfo-2.9.1-22.1 python-libxml2-2.9.1-22.1 python-libxml2-debuginfo-2.9.1-22.1 python-libxml2-debugsource-2.9.1-22.1 - openSUSE Leap 42.1 (noarch): libxml2-doc-2.9.1-22.1 - openSUSE Leap 42.1 (x86_64): libxml2-2-32bit-2.9.1-22.1 libxml2-2-debuginfo-32bit-2.9.1-22.1 libxml2-devel-32bit-2.9.1-22.1 References: https://www.suse.com/security/cve/CVE-2016-4658.html https://bugzilla.suse.com/1005544

1 0

openSUSE-SU-2016:2710-1: moderate: Security update for ghostscript
by opensuse-security＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Security Update: Security update for ghostscript ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2710-1 Rating: moderate References: #1004237 Cross-References: CVE-2016-8602 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ghostscript fixes the following issues: - CVE-2016-8602: Insufficient parameter check in .sethalftone5 (bsc#1004237). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1258=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ghostscript-9.15-11.1 ghostscript-debuginfo-9.15-11.1 ghostscript-debugsource-9.15-11.1 ghostscript-devel-9.15-11.1 ghostscript-mini-9.15-11.1 ghostscript-mini-debuginfo-9.15-11.1 ghostscript-mini-debugsource-9.15-11.1 ghostscript-mini-devel-9.15-11.1 ghostscript-x11-9.15-11.1 ghostscript-x11-debuginfo-9.15-11.1 References: https://www.suse.com/security/cve/CVE-2016-8602.html https://bugzilla.suse.com/1004237

1 0

openSUSE-RU-2016:2709-1: Recommended update for boost
by maintenance＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Recommended Update: Recommended update for boost ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2709-1 Rating: low References: #925309 #970706 #996917 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for boost adapts paths for our GCC versions: - Boost assumes /usr/include/c++/x.y.z/ existence for GCC 4.x onward while our version of GCC only has /usr/include/c++/x.y for 4.x GCC and /usr/include/c++/x/ for 5.x onward. (bsc#996917) - Fix regression in asio library. (bsc#925309) - Add libboost_context to the -devel dependencies when it is built. (bsc#970706) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1253=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): boost-devel-1.54.0-13.1 libboost_atomic1_54_0-1.54.0-13.1 libboost_atomic1_54_0-debuginfo-1.54.0-13.1 libboost_chrono1_54_0-1.54.0-13.1 libboost_chrono1_54_0-debuginfo-1.54.0-13.1 libboost_context1_54_0-1.54.0-13.1 libboost_context1_54_0-debuginfo-1.54.0-13.1 libboost_date_time1_54_0-1.54.0-13.1 libboost_date_time1_54_0-debuginfo-1.54.0-13.1 libboost_filesystem1_54_0-1.54.0-13.1 libboost_filesystem1_54_0-debuginfo-1.54.0-13.1 libboost_graph1_54_0-1.54.0-13.1 libboost_graph1_54_0-debuginfo-1.54.0-13.1 libboost_graph_parallel1_54_0-1.54.0-13.1 libboost_graph_parallel1_54_0-debuginfo-1.54.0-13.1 libboost_iostreams1_54_0-1.54.0-13.1 libboost_iostreams1_54_0-debuginfo-1.54.0-13.1 libboost_locale1_54_0-1.54.0-13.1 libboost_locale1_54_0-debuginfo-1.54.0-13.1 libboost_log1_54_0-1.54.0-13.1 libboost_log1_54_0-debuginfo-1.54.0-13.1 libboost_math1_54_0-1.54.0-13.1 libboost_math1_54_0-debuginfo-1.54.0-13.1 libboost_mpi1_54_0-1.54.0-13.1 libboost_mpi1_54_0-debuginfo-1.54.0-13.1 libboost_program_options1_54_0-1.54.0-13.1 libboost_program_options1_54_0-debuginfo-1.54.0-13.1 libboost_python1_54_0-1.54.0-13.1 libboost_python1_54_0-debuginfo-1.54.0-13.1 libboost_random1_54_0-1.54.0-13.1 libboost_random1_54_0-debuginfo-1.54.0-13.1 libboost_regex1_54_0-1.54.0-13.1 libboost_regex1_54_0-debuginfo-1.54.0-13.1 libboost_serialization1_54_0-1.54.0-13.1 libboost_serialization1_54_0-debuginfo-1.54.0-13.1 libboost_signals1_54_0-1.54.0-13.1 libboost_signals1_54_0-debuginfo-1.54.0-13.1 libboost_system1_54_0-1.54.0-13.1 libboost_system1_54_0-debuginfo-1.54.0-13.1 libboost_test1_54_0-1.54.0-13.1 libboost_test1_54_0-debuginfo-1.54.0-13.1 libboost_thread1_54_0-1.54.0-13.1 libboost_thread1_54_0-debuginfo-1.54.0-13.1 libboost_timer1_54_0-1.54.0-13.1 libboost_timer1_54_0-debuginfo-1.54.0-13.1 libboost_wave1_54_0-1.54.0-13.1 libboost_wave1_54_0-debuginfo-1.54.0-13.1 - openSUSE Leap 42.1 (x86_64): boost-devel-32bit-1.54.0-13.1 libboost_atomic1_54_0-32bit-1.54.0-13.1 libboost_atomic1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_context1_54_0-32bit-1.54.0-13.1 libboost_context1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_date_time1_54_0-32bit-1.54.0-13.1 libboost_date_time1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_filesystem1_54_0-32bit-1.54.0-13.1 libboost_filesystem1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_graph1_54_0-32bit-1.54.0-13.1 libboost_graph1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_graph_parallel1_54_0-32bit-1.54.0-13.1 libboost_graph_parallel1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_iostreams1_54_0-32bit-1.54.0-13.1 libboost_iostreams1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_math1_54_0-32bit-1.54.0-13.1 libboost_math1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_mpi1_54_0-32bit-1.54.0-13.1 libboost_mpi1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_program_options1_54_0-32bit-1.54.0-13.1 libboost_program_options1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_python1_54_0-32bit-1.54.0-13.1 libboost_python1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_random1_54_0-32bit-1.54.0-13.1 libboost_random1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_regex1_54_0-32bit-1.54.0-13.1 libboost_regex1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_serialization1_54_0-32bit-1.54.0-13.1 libboost_serialization1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_signals1_54_0-32bit-1.54.0-13.1 libboost_signals1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_system1_54_0-32bit-1.54.0-13.1 libboost_system1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_test1_54_0-32bit-1.54.0-13.1 libboost_test1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_thread1_54_0-32bit-1.54.0-13.1 libboost_thread1_54_0-debuginfo-32bit-1.54.0-13.1 libboost_wave1_54_0-32bit-1.54.0-13.1 libboost_wave1_54_0-debuginfo-32bit-1.54.0-13.1 - openSUSE Leap 42.1 (noarch): boost-doc-html-1.54.0-13.1 boost-doc-man-1.54.0-13.1 boost-doc-pdf-1.54.0-13.1 boost-license1_54_0-1.54.0-13.1 References: https://bugzilla.suse.com/925309 https://bugzilla.suse.com/970706 https://bugzilla.suse.com/996917

1 0

openSUSE-RU-2016:2708-1: Recommended update for sshfs
by maintenance＠opensuse.org 03 Nov '16

03 Nov '16

openSUSE Recommended Update: Recommended update for sshfs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2708-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for sshfs fixes the following issues: - Added support for the "fsync" extension Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1254=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): sshfs-2.8-6.1 References:

1 0