December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:3240-1: moderate: Recommended update for xorg-x11-server
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for xorg-x11-server ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3240-1 Rating: moderate References: #1011158 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xorg-x11-server fixes the following issues: - Update Intel PCI IDs for modesetting to include Broxton 2x6. (boo#1011158) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1506=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xorg-x11-server-7.6_1.18.3-7.1 xorg-x11-server-debuginfo-7.6_1.18.3-7.1 xorg-x11-server-debugsource-7.6_1.18.3-7.1 xorg-x11-server-extra-7.6_1.18.3-7.1 xorg-x11-server-extra-debuginfo-7.6_1.18.3-7.1 xorg-x11-server-sdk-7.6_1.18.3-7.1 xorg-x11-server-source-7.6_1.18.3-7.1 References: https://bugzilla.suse.com/1011158

1 0

openSUSE-SU-2016:3239-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3239-1 Rating: moderate References: #1015187 #1015188 #1015189 Cross-References: CVE-2016-9933 CVE-2016-9934 CVE-2016-9935 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This security update for php5 fixes the following issues: - a call to ImageFillToBorder() could cause a stack overflow leading to stack exhaustion when the image used was not truecolor (CVE-2016-9933, boo#1015187) - deserialization of a WDDX packet containing a PDORow object could crash php (CVE-2016-9934, boo#1015188) - deserialization of a WDDX packet containing an empty boolean element could crash php (CVE-2016-9935, boo#1015189) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1505=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): apache2-mod_php5-5.6.1-89.1 apache2-mod_php5-debuginfo-5.6.1-89.1 php5-5.6.1-89.1 php5-bcmath-5.6.1-89.1 php5-bcmath-debuginfo-5.6.1-89.1 php5-bz2-5.6.1-89.1 php5-bz2-debuginfo-5.6.1-89.1 php5-calendar-5.6.1-89.1 php5-calendar-debuginfo-5.6.1-89.1 php5-ctype-5.6.1-89.1 php5-ctype-debuginfo-5.6.1-89.1 php5-curl-5.6.1-89.1 php5-curl-debuginfo-5.6.1-89.1 php5-dba-5.6.1-89.1 php5-dba-debuginfo-5.6.1-89.1 php5-debuginfo-5.6.1-89.1 php5-debugsource-5.6.1-89.1 php5-devel-5.6.1-89.1 php5-dom-5.6.1-89.1 php5-dom-debuginfo-5.6.1-89.1 php5-enchant-5.6.1-89.1 php5-enchant-debuginfo-5.6.1-89.1 php5-exif-5.6.1-89.1 php5-exif-debuginfo-5.6.1-89.1 php5-fastcgi-5.6.1-89.1 php5-fastcgi-debuginfo-5.6.1-89.1 php5-fileinfo-5.6.1-89.1 php5-fileinfo-debuginfo-5.6.1-89.1 php5-firebird-5.6.1-89.1 php5-firebird-debuginfo-5.6.1-89.1 php5-fpm-5.6.1-89.1 php5-fpm-debuginfo-5.6.1-89.1 php5-ftp-5.6.1-89.1 php5-ftp-debuginfo-5.6.1-89.1 php5-gd-5.6.1-89.1 php5-gd-debuginfo-5.6.1-89.1 php5-gettext-5.6.1-89.1 php5-gettext-debuginfo-5.6.1-89.1 php5-gmp-5.6.1-89.1 php5-gmp-debuginfo-5.6.1-89.1 php5-iconv-5.6.1-89.1 php5-iconv-debuginfo-5.6.1-89.1 php5-imap-5.6.1-89.1 php5-imap-debuginfo-5.6.1-89.1 php5-intl-5.6.1-89.1 php5-intl-debuginfo-5.6.1-89.1 php5-json-5.6.1-89.1 php5-json-debuginfo-5.6.1-89.1 php5-ldap-5.6.1-89.1 php5-ldap-debuginfo-5.6.1-89.1 php5-mbstring-5.6.1-89.1 php5-mbstring-debuginfo-5.6.1-89.1 php5-mcrypt-5.6.1-89.1 php5-mcrypt-debuginfo-5.6.1-89.1 php5-mssql-5.6.1-89.1 php5-mssql-debuginfo-5.6.1-89.1 php5-mysql-5.6.1-89.1 php5-mysql-debuginfo-5.6.1-89.1 php5-odbc-5.6.1-89.1 php5-odbc-debuginfo-5.6.1-89.1 php5-opcache-5.6.1-89.1 php5-opcache-debuginfo-5.6.1-89.1 php5-openssl-5.6.1-89.1 php5-openssl-debuginfo-5.6.1-89.1 php5-pcntl-5.6.1-89.1 php5-pcntl-debuginfo-5.6.1-89.1 php5-pdo-5.6.1-89.1 php5-pdo-debuginfo-5.6.1-89.1 php5-pgsql-5.6.1-89.1 php5-pgsql-debuginfo-5.6.1-89.1 php5-phar-5.6.1-89.1 php5-phar-debuginfo-5.6.1-89.1 php5-posix-5.6.1-89.1 php5-posix-debuginfo-5.6.1-89.1 php5-pspell-5.6.1-89.1 php5-pspell-debuginfo-5.6.1-89.1 php5-readline-5.6.1-89.1 php5-readline-debuginfo-5.6.1-89.1 php5-shmop-5.6.1-89.1 php5-shmop-debuginfo-5.6.1-89.1 php5-snmp-5.6.1-89.1 php5-snmp-debuginfo-5.6.1-89.1 php5-soap-5.6.1-89.1 php5-soap-debuginfo-5.6.1-89.1 php5-sockets-5.6.1-89.1 php5-sockets-debuginfo-5.6.1-89.1 php5-sqlite-5.6.1-89.1 php5-sqlite-debuginfo-5.6.1-89.1 php5-suhosin-5.6.1-89.1 php5-suhosin-debuginfo-5.6.1-89.1 php5-sysvmsg-5.6.1-89.1 php5-sysvmsg-debuginfo-5.6.1-89.1 php5-sysvsem-5.6.1-89.1 php5-sysvsem-debuginfo-5.6.1-89.1 php5-sysvshm-5.6.1-89.1 php5-sysvshm-debuginfo-5.6.1-89.1 php5-tidy-5.6.1-89.1 php5-tidy-debuginfo-5.6.1-89.1 php5-tokenizer-5.6.1-89.1 php5-tokenizer-debuginfo-5.6.1-89.1 php5-wddx-5.6.1-89.1 php5-wddx-debuginfo-5.6.1-89.1 php5-xmlreader-5.6.1-89.1 php5-xmlreader-debuginfo-5.6.1-89.1 php5-xmlrpc-5.6.1-89.1 php5-xmlrpc-debuginfo-5.6.1-89.1 php5-xmlwriter-5.6.1-89.1 php5-xmlwriter-debuginfo-5.6.1-89.1 php5-xsl-5.6.1-89.1 php5-xsl-debuginfo-5.6.1-89.1 php5-zip-5.6.1-89.1 php5-zip-debuginfo-5.6.1-89.1 php5-zlib-5.6.1-89.1 php5-zlib-debuginfo-5.6.1-89.1 - openSUSE 13.2 (noarch): php5-pear-5.6.1-89.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://www.suse.com/security/cve/CVE-2016-9934.html https://www.suse.com/security/cve/CVE-2016-9935.html https://bugzilla.suse.com/1015187 https://bugzilla.suse.com/1015188 https://bugzilla.suse.com/1015189

1 0

openSUSE-SU-2016:3238-1: moderate: Security update for GraphicsMagick
by opensuse-security＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Security Update: Security update for GraphicsMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3238-1 Rating: moderate References: #1009318 #1013640 Cross-References: CVE-2016-8866 CVE-2016-9830 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This security update for GraphicsMagick fixes the following issues: - a memory allocation failure was fixed (CVE-2016-8866, boo#1009318) - maliciously crafted jng files could crash the identify utility (CVE-2016-9830, boo#1013640) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1511=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1511=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1511=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): GraphicsMagick-1.3.25-6.1 GraphicsMagick-debuginfo-1.3.25-6.1 GraphicsMagick-debugsource-1.3.25-6.1 GraphicsMagick-devel-1.3.25-6.1 libGraphicsMagick++-Q16-12-1.3.25-6.1 libGraphicsMagick++-Q16-12-debuginfo-1.3.25-6.1 libGraphicsMagick++-devel-1.3.25-6.1 libGraphicsMagick-Q16-3-1.3.25-6.1 libGraphicsMagick-Q16-3-debuginfo-1.3.25-6.1 libGraphicsMagick3-config-1.3.25-6.1 libGraphicsMagickWand-Q16-2-1.3.25-6.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.25-6.1 perl-GraphicsMagick-1.3.25-6.1 perl-GraphicsMagick-debuginfo-1.3.25-6.1 - openSUSE Leap 42.1 (i586 x86_64): GraphicsMagick-1.3.21-23.1 GraphicsMagick-debuginfo-1.3.21-23.1 GraphicsMagick-debugsource-1.3.21-23.1 GraphicsMagick-devel-1.3.21-23.1 libGraphicsMagick++-Q16-11-1.3.21-23.1 libGraphicsMagick++-Q16-11-debuginfo-1.3.21-23.1 libGraphicsMagick++-devel-1.3.21-23.1 libGraphicsMagick-Q16-3-1.3.21-23.1 libGraphicsMagick-Q16-3-debuginfo-1.3.21-23.1 libGraphicsMagick3-config-1.3.21-23.1 libGraphicsMagickWand-Q16-2-1.3.21-23.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.21-23.1 perl-GraphicsMagick-1.3.21-23.1 perl-GraphicsMagick-debuginfo-1.3.21-23.1 - openSUSE 13.2 (i586 x86_64): GraphicsMagick-1.3.20-21.1 GraphicsMagick-debuginfo-1.3.20-21.1 GraphicsMagick-debugsource-1.3.20-21.1 GraphicsMagick-devel-1.3.20-21.1 libGraphicsMagick++-Q16-3-1.3.20-21.1 libGraphicsMagick++-Q16-3-debuginfo-1.3.20-21.1 libGraphicsMagick++-devel-1.3.20-21.1 libGraphicsMagick-Q16-3-1.3.20-21.1 libGraphicsMagick-Q16-3-debuginfo-1.3.20-21.1 libGraphicsMagick3-config-1.3.20-21.1 libGraphicsMagickWand-Q16-2-1.3.20-21.1 libGraphicsMagickWand-Q16-2-debuginfo-1.3.20-21.1 perl-GraphicsMagick-1.3.20-21.1 perl-GraphicsMagick-debuginfo-1.3.20-21.1 References: https://www.suse.com/security/cve/CVE-2016-8866.html https://www.suse.com/security/cve/CVE-2016-9830.html https://bugzilla.suse.com/1009318 https://bugzilla.suse.com/1013640

1 0

openSUSE-SU-2016:3237-1: moderate: Security update for qemu
by opensuse-security＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Security Update: Security update for qemu ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3237-1 Rating: moderate References: #1000345 #1000346 #1001151 #1002116 #1002549 #1002550 #1002557 #1003612 #1003613 #1003878 #1003893 #1003894 #1004702 #1004706 #1004707 #1005353 #1005374 #1006536 #1006538 #1007391 #1007493 #1007494 #1007495 #1007769 #1008148 #998516 Cross-References: CVE-2016-7161 CVE-2016-7170 CVE-2016-7422 CVE-2016-7466 CVE-2016-7907 CVE-2016-7908 CVE-2016-7909 CVE-2016-7994 CVE-2016-7995 CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8667 CVE-2016-8668 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9104 CVE-2016-9105 CVE-2016-9106 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves 21 vulnerabilities and has 5 fixes is now available. Description: This update for qemu to version 2.6.2 fixes the several issues. These security issues were fixed: - CVE-2016-7161: Heap-based buffer overflow in the .receive callback of xlnx.xps-ethernetlite in QEMU (aka Quick Emulator) allowed attackers to execute arbitrary code on the QEMU host via a large ethlite packet (bsc#1001151). - CVE-2016-7170: OOB stack memory access when processing svga command (bsc#998516). - CVE-2016-7466: xhci memory leakage during device unplug (bsc#1000345). - CVE-2016-7422: NULL pointer dereference in virtqueu_map_desc (bsc#1000346). - CVE-2016-7908: The mcf_fec_do_tx function in hw/net/mcf_fec.c did not properly limit the buffer descriptor count when transmitting packets, which allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via vectors involving a buffer descriptor with a length of 0 and crafted values in bd.flags (bsc#1002550). - CVE-2016-7995: Memory leak in ehci_process_itd (bsc#1003612). - CVE-2016-8576: The xhci_ring_fetch function in hw/usb/hcd-xhci.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process (bsc#1003878). - CVE-2016-8578: The v9fs_iov_vunmarshal function in fsdev/9p-iov-marshal.c allowed local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) by sending an empty string parameter to a 9P operation (bsc#1003894). - CVE-2016-9105: Memory leakage in v9fs_link (bsc#1007494). - CVE-2016-8577: Memory leak in the v9fs_read function in hw/9pfs/9p.c allowed local guest OS administrators to cause a denial of service (memory consumption) via vectors related to an I/O read operation (bsc#1003893). - CVE-2016-9106: Memory leakage in v9fs_write (bsc#1007495). - CVE-2016-8669: The serial_update_parameters function in hw/char/serial.c allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving a value of divider greater than baud base (bsc#1004707). - CVE-2016-7909: The pcnet_rdra_addr function in hw/net/pcnet.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0 (bsc#1002557). - CVE-2016-9101: eepro100 memory leakage whern unplugging a device (bsc#1007391). - CVE-2016-8668: The rocker_io_writel function in hw/net/rocker/rocker.c allowed local guest OS administrators to cause a denial of service (out-of-bounds read and QEMU process crash) by leveraging failure to limit DMA buffer size (bsc#1004706). - CVE-2016-8910: The rtl8139_cplus_transmit function in hw/net/rtl8139.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) by leveraging failure to limit the ring descriptor count (bsc#1006538). - CVE-2016-8909: The intel_hda_xfer function in hw/audio/intel-hda.c allowed local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via an entry with the same value for buffer length and pointer position (bsc#1006536). - CVE-2016-7994: Memory leak in virtio_gpu_resource_create_2d (bsc#1003613). - CVE-2016-9104: Integer overflow leading to OOB access in 9pfs (bsc#1007493). - CVE-2016-8667: The rc4030_write function in hw/dma/rc4030.c allowed local guest OS administrators to cause a denial of service (divide-by-zero error and QEMU process crash) via a large interval timer reload value (bsc#1004702). - CVE-2016-7907: The pcnet_rdra_addr function in hw/net/pcnet.c allowed local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by setting the (1) receive or (2) transmit descriptor ring length to 0 (bsc#1002549). These non-security issues were fixed: - Change kvm-supported.txt to be per-architecture documentation, stored in the package documentation directory of each per-arch package (bsc#1005353). - Update support doc to include current ARM64 (AArch64) support stance (bsc#1005374). - Fix migration failure when snapshot also has been done (bsc#1008148). - Change package post script udevadm trigger calls to be device specific (bsc#1002116). - Add qmp-commands.txt documentation file back in. It was inadvertently dropped. - Add an x86 cpu option (l3-cache) to specify that an L3 cache is present and another option (cpuid-0xb) to enable the cpuid 0xb leaf (bsc#1007769). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1504=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): qemu-2.6.2-23.1 qemu-arm-2.6.2-23.1 qemu-arm-debuginfo-2.6.2-23.1 qemu-block-curl-2.6.2-23.1 qemu-block-curl-debuginfo-2.6.2-23.1 qemu-block-dmg-2.6.2-23.1 qemu-block-dmg-debuginfo-2.6.2-23.1 qemu-block-iscsi-2.6.2-23.1 qemu-block-iscsi-debuginfo-2.6.2-23.1 qemu-block-ssh-2.6.2-23.1 qemu-block-ssh-debuginfo-2.6.2-23.1 qemu-debugsource-2.6.2-23.1 qemu-extra-2.6.2-23.1 qemu-extra-debuginfo-2.6.2-23.1 qemu-guest-agent-2.6.2-23.1 qemu-guest-agent-debuginfo-2.6.2-23.1 qemu-kvm-2.6.2-23.1 qemu-lang-2.6.2-23.1 qemu-linux-user-2.6.2-23.1 qemu-linux-user-debuginfo-2.6.2-23.1 qemu-linux-user-debugsource-2.6.2-23.1 qemu-ppc-2.6.2-23.1 qemu-ppc-debuginfo-2.6.2-23.1 qemu-s390-2.6.2-23.1 qemu-s390-debuginfo-2.6.2-23.1 qemu-testsuite-2.6.2-23.1 qemu-tools-2.6.2-23.1 qemu-tools-debuginfo-2.6.2-23.1 qemu-x86-2.6.2-23.1 qemu-x86-debuginfo-2.6.2-23.1 - openSUSE Leap 42.2 (x86_64): qemu-block-rbd-2.6.2-23.1 qemu-block-rbd-debuginfo-2.6.2-23.1 - openSUSE Leap 42.2 (noarch): qemu-ipxe-1.0.0-23.1 qemu-seabios-1.9.1-23.1 qemu-sgabios-8-23.1 qemu-vgabios-1.9.1-23.1 References: https://www.suse.com/security/cve/CVE-2016-7161.html https://www.suse.com/security/cve/CVE-2016-7170.html https://www.suse.com/security/cve/CVE-2016-7422.html https://www.suse.com/security/cve/CVE-2016-7466.html https://www.suse.com/security/cve/CVE-2016-7907.html https://www.suse.com/security/cve/CVE-2016-7908.html https://www.suse.com/security/cve/CVE-2016-7909.html https://www.suse.com/security/cve/CVE-2016-7994.html https://www.suse.com/security/cve/CVE-2016-7995.html https://www.suse.com/security/cve/CVE-2016-8576.html https://www.suse.com/security/cve/CVE-2016-8577.html https://www.suse.com/security/cve/CVE-2016-8578.html https://www.suse.com/security/cve/CVE-2016-8667.html https://www.suse.com/security/cve/CVE-2016-8668.html https://www.suse.com/security/cve/CVE-2016-8669.html https://www.suse.com/security/cve/CVE-2016-8909.html https://www.suse.com/security/cve/CVE-2016-8910.html https://www.suse.com/security/cve/CVE-2016-9101.html https://www.suse.com/security/cve/CVE-2016-9104.html https://www.suse.com/security/cve/CVE-2016-9105.html https://www.suse.com/security/cve/CVE-2016-9106.html https://bugzilla.suse.com/1000345 https://bugzilla.suse.com/1000346 https://bugzilla.suse.com/1001151 https://bugzilla.suse.com/1002116 https://bugzilla.suse.com/1002549 https://bugzilla.suse.com/1002550 https://bugzilla.suse.com/1002557 https://bugzilla.suse.com/1003612 https://bugzilla.suse.com/1003613 https://bugzilla.suse.com/1003878 https://bugzilla.suse.com/1003893 https://bugzilla.suse.com/1003894 https://bugzilla.suse.com/1004702 https://bugzilla.suse.com/1004706 https://bugzilla.suse.com/1004707 https://bugzilla.suse.com/1005353 https://bugzilla.suse.com/1005374 https://bugzilla.suse.com/1006536 https://bugzilla.suse.com/1006538 https://bugzilla.suse.com/1007391 https://bugzilla.suse.com/1007493 https://bugzilla.suse.com/1007494 https://bugzilla.suse.com/1007495 https://bugzilla.suse.com/1007769 https://bugzilla.suse.com/1008148 https://bugzilla.suse.com/998516

1 0

openSUSE-RU-2016:3236-1: moderate: Recommended update for kwalletmanager5
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for kwalletmanager5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3236-1 Rating: moderate References: #1015772 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kwalletmanager5 fixes the following issues: - Fix "Export to XML..." creating an empty file. (boo#1015772, kde#368314) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1509=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kwalletmanager5-16.08.2-3.1 kwalletmanager5-debuginfo-16.08.2-3.1 kwalletmanager5-debugsource-16.08.2-3.1 References: https://bugzilla.suse.com/1015772

1 0

openSUSE-RU-2016:3235-1: moderate: Recommended update for release-notes-openSUSE
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for release-notes-openSUSE ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3235-1 Rating: moderate References: #1009123 #1009275 #1009493 #1010575 #1014686 #995062 #998663 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 7 recommended fixes can now be installed. Description: This update for release-notes-openSUSE fixes the following issues: - 42.2.20161212 (tracked in boo#1009123) - Added note on Dolphin and extended permission bits (boo#1009275) - Added note on AArch64 Page Size (boo#998663) - Added note on GNOME Shell not locking without GDM (boo#995062) - Added note on Mount by Label installer crash (boo#1009493) - Added warning to section about Btrfs disk space leak (boo#1010575) - Added nodejs to list of renamed packages - Removed Seamonkey from list of replaced packages (boo#1014686) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1514=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): release-notes-openSUSE-42.2.20161212-3.1 References: https://bugzilla.suse.com/1009123 https://bugzilla.suse.com/1009275 https://bugzilla.suse.com/1009493 https://bugzilla.suse.com/1010575 https://bugzilla.suse.com/1014686 https://bugzilla.suse.com/995062 https://bugzilla.suse.com/998663

1 0

openSUSE-SU-2016:3233-1: important: Security update for ImageMagick
by opensuse-security＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Security Update: Security update for ImageMagick ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3233-1 Rating: important References: #1009318 #1013376 #1014159 Cross-References: CVE-2016-8707 CVE-2016-8862 CVE-2016-8866 CVE-2016-9556 CVE-2016-9773 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This security update for ImageMagick fixes the following issues: - a maliciously crafted compressed TIFF image could cause code remote code execution in the convert utility in particular circumstances (CVE-2016-8707, boo#1014159) - a memory allocation failure was fixed (CVE-2016-8866, boo#1009318, follow up on CVE-2016-8862) - the identify utility could crash on maliciously crafted images (CVE-2016-9773, boo#1013376, follow up on CVE-2016-9556) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1512=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): ImageMagick-6.8.9.8-45.1 ImageMagick-debuginfo-6.8.9.8-45.1 ImageMagick-debugsource-6.8.9.8-45.1 ImageMagick-devel-6.8.9.8-45.1 ImageMagick-extra-6.8.9.8-45.1 ImageMagick-extra-debuginfo-6.8.9.8-45.1 libMagick++-6_Q16-5-6.8.9.8-45.1 libMagick++-6_Q16-5-debuginfo-6.8.9.8-45.1 libMagick++-devel-6.8.9.8-45.1 libMagickCore-6_Q16-2-6.8.9.8-45.1 libMagickCore-6_Q16-2-debuginfo-6.8.9.8-45.1 libMagickWand-6_Q16-2-6.8.9.8-45.1 libMagickWand-6_Q16-2-debuginfo-6.8.9.8-45.1 perl-PerlMagick-6.8.9.8-45.1 perl-PerlMagick-debuginfo-6.8.9.8-45.1 - openSUSE 13.2 (x86_64): ImageMagick-devel-32bit-6.8.9.8-45.1 libMagick++-6_Q16-5-32bit-6.8.9.8-45.1 libMagick++-6_Q16-5-debuginfo-32bit-6.8.9.8-45.1 libMagick++-devel-32bit-6.8.9.8-45.1 libMagickCore-6_Q16-2-32bit-6.8.9.8-45.1 libMagickCore-6_Q16-2-debuginfo-32bit-6.8.9.8-45.1 libMagickWand-6_Q16-2-32bit-6.8.9.8-45.1 libMagickWand-6_Q16-2-debuginfo-32bit-6.8.9.8-45.1 - openSUSE 13.2 (noarch): ImageMagick-doc-6.8.9.8-45.1 References: https://www.suse.com/security/cve/CVE-2016-8707.html https://www.suse.com/security/cve/CVE-2016-8862.html https://www.suse.com/security/cve/CVE-2016-8866.html https://www.suse.com/security/cve/CVE-2016-9556.html https://www.suse.com/security/cve/CVE-2016-9773.html https://bugzilla.suse.com/1009318 https://bugzilla.suse.com/1013376 https://bugzilla.suse.com/1014159

1 0

openSUSE-RU-2016:3232-1: moderate: Recommended update for dtb-source
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for dtb-source ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3232-1 Rating: moderate References: #1012094 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dtb-source fixes the following issues: - enable more armv7l boards now that the kernel is fixed, including RPi2 (boo#1012094) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1516=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dtb-source-4.4.36-11.1 References: https://bugzilla.suse.com/1012094

1 0

openSUSE-RU-2016:3231-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3231-1 Rating: moderate References: #1015012 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa provides the following fixes: - Fix hangs with Radeon due to a use-after-free bug in Gallium. (bsc#1015012) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1513=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1513=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1513=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): Mesa-11.2.2-162.1 Mesa-debuginfo-11.2.2-162.1 Mesa-debugsource-11.2.2-162.1 Mesa-devel-11.2.2-162.1 Mesa-dri-devel-11.2.2-162.1 Mesa-dri-nouveau-11.2.2-162.1 Mesa-libEGL-devel-11.2.2-162.1 Mesa-libEGL1-11.2.2-162.1 Mesa-libEGL1-debuginfo-11.2.2-162.1 Mesa-libGL-devel-11.2.2-162.1 Mesa-libGL1-11.2.2-162.1 Mesa-libGL1-debuginfo-11.2.2-162.1 Mesa-libGLESv1_CM-devel-11.2.2-162.1 Mesa-libGLESv1_CM1-11.2.2-162.1 Mesa-libGLESv1_CM1-debuginfo-11.2.2-162.1 Mesa-libGLESv2-2-11.2.2-162.1 Mesa-libGLESv2-2-debuginfo-11.2.2-162.1 Mesa-libGLESv2-devel-11.2.2-162.1 Mesa-libGLESv3-devel-11.2.2-162.1 Mesa-libOpenCL-11.2.2-162.1 Mesa-libOpenCL-debuginfo-11.2.2-162.1 Mesa-libd3d-11.2.2-162.1 Mesa-libd3d-debuginfo-11.2.2-162.1 Mesa-libd3d-devel-11.2.2-162.1 Mesa-libglapi-devel-11.2.2-162.1 Mesa-libglapi0-11.2.2-162.1 Mesa-libglapi0-debuginfo-11.2.2-162.1 Mesa-libva-11.2.2-162.1 Mesa-libva-debuginfo-11.2.2-162.1 libOSMesa-devel-11.2.2-162.1 libOSMesa9-11.2.2-162.1 libOSMesa9-debuginfo-11.2.2-162.1 libXvMC_nouveau-11.2.2-162.1 libXvMC_nouveau-debuginfo-11.2.2-162.1 libXvMC_r600-11.2.2-162.1 libXvMC_r600-debuginfo-11.2.2-162.1 libgbm-devel-11.2.2-162.1 libgbm1-11.2.2-162.1 libgbm1-debuginfo-11.2.2-162.1 libvdpau_nouveau-11.2.2-162.1 libvdpau_nouveau-debuginfo-11.2.2-162.1 libvdpau_r300-11.2.2-162.1 libvdpau_r300-debuginfo-11.2.2-162.1 libvdpau_r600-11.2.2-162.1 libvdpau_r600-debuginfo-11.2.2-162.1 libvdpau_radeonsi-11.2.2-162.1 libvdpau_radeonsi-debuginfo-11.2.2-162.1 libwayland-egl-devel-11.2.2-162.1 libwayland-egl1-11.2.2-162.1 libwayland-egl1-debuginfo-11.2.2-162.1 libxatracker-devel-1.0.0-162.1 libxatracker2-1.0.0-162.1 libxatracker2-debuginfo-1.0.0-162.1 - openSUSE Leap 42.2 (x86_64): Mesa-32bit-11.2.2-162.1 Mesa-debuginfo-32bit-11.2.2-162.1 Mesa-dri-nouveau-32bit-11.2.2-162.1 Mesa-libEGL-devel-32bit-11.2.2-162.1 Mesa-libEGL1-32bit-11.2.2-162.1 Mesa-libEGL1-debuginfo-32bit-11.2.2-162.1 Mesa-libGL-devel-32bit-11.2.2-162.1 Mesa-libGL1-32bit-11.2.2-162.1 Mesa-libGL1-debuginfo-32bit-11.2.2-162.1 Mesa-libGLESv1_CM-devel-32bit-11.2.2-162.1 Mesa-libGLESv1_CM1-32bit-11.2.2-162.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.2.2-162.1 Mesa-libGLESv2-2-32bit-11.2.2-162.1 Mesa-libGLESv2-2-debuginfo-32bit-11.2.2-162.1 Mesa-libGLESv2-devel-32bit-11.2.2-162.1 Mesa-libOpenCL-32bit-11.2.2-162.1 Mesa-libOpenCL-debuginfo-32bit-11.2.2-162.1 Mesa-libd3d-32bit-11.2.2-162.1 Mesa-libd3d-debuginfo-32bit-11.2.2-162.1 Mesa-libd3d-devel-32bit-11.2.2-162.1 Mesa-libglapi-devel-32bit-11.2.2-162.1 Mesa-libglapi0-32bit-11.2.2-162.1 Mesa-libglapi0-debuginfo-32bit-11.2.2-162.1 libOSMesa-devel-32bit-11.2.2-162.1 libOSMesa9-32bit-11.2.2-162.1 libOSMesa9-debuginfo-32bit-11.2.2-162.1 libXvMC_nouveau-32bit-11.2.2-162.1 libXvMC_nouveau-debuginfo-32bit-11.2.2-162.1 libXvMC_r600-32bit-11.2.2-162.1 libXvMC_r600-debuginfo-32bit-11.2.2-162.1 libgbm-devel-32bit-11.2.2-162.1 libgbm1-32bit-11.2.2-162.1 libgbm1-debuginfo-32bit-11.2.2-162.1 libvdpau_nouveau-32bit-11.2.2-162.1 libvdpau_nouveau-debuginfo-32bit-11.2.2-162.1 libvdpau_r300-32bit-11.2.2-162.1 libvdpau_r300-debuginfo-32bit-11.2.2-162.1 libvdpau_r600-32bit-11.2.2-162.1 libvdpau_r600-debuginfo-32bit-11.2.2-162.1 libvdpau_radeonsi-32bit-11.2.2-162.1 libvdpau_radeonsi-debuginfo-32bit-11.2.2-162.1 libwayland-egl-devel-32bit-11.2.2-162.1 libwayland-egl1-32bit-11.2.2-162.1 libwayland-egl1-debuginfo-32bit-11.2.2-162.1 - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-154.2 Mesa-debuginfo-11.0.8-154.2 Mesa-debugsource-11.0.8-154.2 Mesa-devel-11.0.8-154.2 Mesa-dri-devel-11.0.8-154.2 Mesa-libEGL-devel-11.0.8-154.2 Mesa-libEGL1-11.0.8-154.2 Mesa-libEGL1-debuginfo-11.0.8-154.2 Mesa-libGL-devel-11.0.8-154.2 Mesa-libGL1-11.0.8-154.2 Mesa-libGL1-debuginfo-11.0.8-154.2 Mesa-libGLESv1_CM-devel-11.0.8-154.2 Mesa-libGLESv1_CM1-11.0.8-154.2 Mesa-libGLESv1_CM1-debuginfo-11.0.8-154.2 Mesa-libGLESv2-2-11.0.8-154.2 Mesa-libGLESv2-2-debuginfo-11.0.8-154.2 Mesa-libGLESv2-devel-11.0.8-154.2 Mesa-libGLESv3-devel-11.0.8-154.2 Mesa-libd3d-11.0.8-154.2 Mesa-libd3d-debuginfo-11.0.8-154.2 Mesa-libd3d-devel-11.0.8-154.2 Mesa-libglapi-devel-11.0.8-154.2 Mesa-libglapi0-11.0.8-154.2 Mesa-libglapi0-debuginfo-11.0.8-154.2 libOSMesa-devel-11.0.8-154.2 libOSMesa9-11.0.8-154.2 libOSMesa9-debuginfo-11.0.8-154.2 libXvMC_nouveau-11.0.8-154.2 libXvMC_nouveau-debuginfo-11.0.8-154.2 libXvMC_r600-11.0.8-154.2 libgbm-devel-11.0.8-154.2 libgbm1-11.0.8-154.2 libgbm1-debuginfo-11.0.8-154.2 libvdpau_nouveau-11.0.8-154.2 libvdpau_nouveau-debuginfo-11.0.8-154.2 libvdpau_r300-11.0.8-154.2 libvdpau_r600-11.0.8-154.2 libvdpau_radeonsi-11.0.8-154.2 libwayland-egl-devel-11.0.8-154.2 libwayland-egl1-11.0.8-154.2 libwayland-egl1-debuginfo-11.0.8-154.2 libxatracker-devel-1.0.0-154.2 libxatracker2-1.0.0-154.2 libxatracker2-debuginfo-1.0.0-154.2 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-154.2 Mesa-debuginfo-32bit-11.0.8-154.2 Mesa-libEGL-devel-32bit-11.0.8-154.2 Mesa-libEGL1-32bit-11.0.8-154.2 Mesa-libEGL1-debuginfo-32bit-11.0.8-154.2 Mesa-libGL-devel-32bit-11.0.8-154.2 Mesa-libGL1-32bit-11.0.8-154.2 Mesa-libGL1-debuginfo-32bit-11.0.8-154.2 Mesa-libGLESv1_CM-devel-32bit-11.0.8-154.2 Mesa-libGLESv1_CM1-32bit-11.0.8-154.2 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-154.2 Mesa-libGLESv2-2-32bit-11.0.8-154.2 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-154.2 Mesa-libGLESv2-devel-32bit-11.0.8-154.2 Mesa-libd3d-32bit-11.0.8-154.2 Mesa-libd3d-debuginfo-32bit-11.0.8-154.2 Mesa-libd3d-devel-32bit-11.0.8-154.2 Mesa-libglapi-devel-32bit-11.0.8-154.2 Mesa-libglapi0-32bit-11.0.8-154.2 Mesa-libglapi0-debuginfo-32bit-11.0.8-154.2 libOSMesa-devel-32bit-11.0.8-154.2 libOSMesa9-32bit-11.0.8-154.2 libOSMesa9-debuginfo-32bit-11.0.8-154.2 libXvMC_nouveau-32bit-11.0.8-154.2 libXvMC_nouveau-debuginfo-32bit-11.0.8-154.2 libXvMC_r600-32bit-11.0.8-154.2 libgbm-devel-32bit-11.0.8-154.2 libgbm1-32bit-11.0.8-154.2 libgbm1-debuginfo-32bit-11.0.8-154.2 libvdpau_nouveau-32bit-11.0.8-154.2 libvdpau_nouveau-debuginfo-32bit-11.0.8-154.2 libvdpau_r300-32bit-11.0.8-154.2 libvdpau_r600-32bit-11.0.8-154.2 libvdpau_radeonsi-32bit-11.0.8-154.2 libwayland-egl-devel-32bit-11.0.8-154.2 libwayland-egl1-32bit-11.0.8-154.2 libwayland-egl1-debuginfo-32bit-11.0.8-154.2 - openSUSE 13.2 (i586 x86_64): Mesa-10.3.7-91.24.2 Mesa-debuginfo-10.3.7-91.24.2 Mesa-debugsource-10.3.7-91.24.2 Mesa-devel-10.3.7-91.24.2 Mesa-libEGL-devel-10.3.7-91.24.2 Mesa-libEGL1-10.3.7-91.24.2 Mesa-libEGL1-debuginfo-10.3.7-91.24.2 Mesa-libGL-devel-10.3.7-91.24.2 Mesa-libGL1-10.3.7-91.24.2 Mesa-libGL1-debuginfo-10.3.7-91.24.2 Mesa-libGLESv1_CM-devel-10.3.7-91.24.2 Mesa-libGLESv1_CM1-10.3.7-91.24.2 Mesa-libGLESv1_CM1-debuginfo-10.3.7-91.24.2 Mesa-libGLESv2-2-10.3.7-91.24.2 Mesa-libGLESv2-2-debuginfo-10.3.7-91.24.2 Mesa-libGLESv2-devel-10.3.7-91.24.2 Mesa-libGLESv3-devel-10.3.7-91.24.2 Mesa-libglapi-devel-10.3.7-91.24.2 Mesa-libglapi0-10.3.7-91.24.2 Mesa-libglapi0-debuginfo-10.3.7-91.24.2 libOSMesa-devel-10.3.7-91.24.2 libOSMesa9-10.3.7-91.24.2 libOSMesa9-debuginfo-10.3.7-91.24.2 libXvMC_nouveau-10.3.7-91.24.2 libXvMC_nouveau-debuginfo-10.3.7-91.24.2 libXvMC_r600-10.3.7-91.24.2 libgbm-devel-10.3.7-91.24.2 libgbm1-10.3.7-91.24.2 libgbm1-debuginfo-10.3.7-91.24.2 libvdpau_nouveau-10.3.7-91.24.2 libvdpau_nouveau-debuginfo-10.3.7-91.24.2 libvdpau_r600-10.3.7-91.24.2 libvdpau_radeonsi-10.3.7-91.24.2 libwayland-egl-devel-10.3.7-91.24.2 libwayland-egl1-10.3.7-91.24.2 libwayland-egl1-debuginfo-10.3.7-91.24.2 libxatracker-devel-1.0.0-91.24.2 libxatracker2-1.0.0-91.24.2 libxatracker2-debuginfo-1.0.0-91.24.2 - openSUSE 13.2 (x86_64): Mesa-32bit-10.3.7-91.24.2 Mesa-debuginfo-32bit-10.3.7-91.24.2 Mesa-libEGL-devel-32bit-10.3.7-91.24.2 Mesa-libEGL1-32bit-10.3.7-91.24.2 Mesa-libEGL1-debuginfo-32bit-10.3.7-91.24.2 Mesa-libGL-devel-32bit-10.3.7-91.24.2 Mesa-libGL1-32bit-10.3.7-91.24.2 Mesa-libGL1-debuginfo-32bit-10.3.7-91.24.2 Mesa-libGLESv1_CM-devel-32bit-10.3.7-91.24.2 Mesa-libGLESv1_CM1-32bit-10.3.7-91.24.2 Mesa-libGLESv1_CM1-debuginfo-32bit-10.3.7-91.24.2 Mesa-libGLESv2-2-32bit-10.3.7-91.24.2 Mesa-libGLESv2-2-debuginfo-32bit-10.3.7-91.24.2 Mesa-libGLESv2-devel-32bit-10.3.7-91.24.2 Mesa-libglapi-devel-32bit-10.3.7-91.24.2 Mesa-libglapi0-32bit-10.3.7-91.24.2 Mesa-libglapi0-debuginfo-32bit-10.3.7-91.24.2 libOSMesa-devel-32bit-10.3.7-91.24.2 libOSMesa9-32bit-10.3.7-91.24.2 libOSMesa9-debuginfo-32bit-10.3.7-91.24.2 libXvMC_nouveau-32bit-10.3.7-91.24.2 libXvMC_nouveau-debuginfo-32bit-10.3.7-91.24.2 libXvMC_r600-32bit-10.3.7-91.24.2 libgbm-devel-32bit-10.3.7-91.24.2 libgbm1-32bit-10.3.7-91.24.2 libgbm1-debuginfo-32bit-10.3.7-91.24.2 libvdpau_nouveau-32bit-10.3.7-91.24.2 libvdpau_nouveau-debuginfo-32bit-10.3.7-91.24.2 libvdpau_r600-32bit-10.3.7-91.24.2 libvdpau_radeonsi-32bit-10.3.7-91.24.2 libwayland-egl-devel-32bit-10.3.7-91.24.2 libwayland-egl1-32bit-10.3.7-91.24.2 libwayland-egl1-debuginfo-32bit-10.3.7-91.24.2 References: https://bugzilla.suse.com/1015012

1 0

openSUSE-RU-2016:3230-1: moderate: Recommended update for mupdf
by maintenance＠opensuse.org 22 Dec '16

22 Dec '16

openSUSE Recommended Update: Recommended update for mupdf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3230-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for mupdf fixes the following issues: - Update to version 1.10 * FictionBook (FB2) e-book support. * Simple SVG parser (a small subset of SVG only). * mutool convert: a new document conversion tool and interface. * Updated base 14 fonts from URW. * New CJK font with language specific variants. * Hyperlink support in EPUB. * Improved PDF annotation editing interface (still a work in progress). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1515=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mupdf-1.10-3.1 mupdf-devel-static-1.10-3.1 References:

1 0