December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2985-1: important: Security update for java-1_8_0-openjdk
by opensuse-security＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Security Update: Security update for java-1_8_0-openjdk ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2985-1 Rating: important References: #1005522 #1005523 #1005524 #1005525 #1005526 #1005527 #1005528 #988651 Cross-References: CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 7 vulnerabilities and has one errata is now available. Description: OpenJDK Java was updated to jdk8u111 (icedtea 3.2.0) to fix the following issues: * Security fixes + S8146490: Direct indirect CRL checks + S8151921: Improved page resolution + S8155968: Update command line options + S8155973, CVE-2016-5542: Tighten jar checks (bsc#1005522) + S8156794: Extend data sharing + S8157176: Improved classfile parsing + S8157739, CVE-2016-5554: Classloader Consistency Checking (bsc#1005523) + S8157749: Improve handling of DNS error replies + S8157753: Audio replay enhancement + S8157759: LCMS Transform Sampling Enhancement + S8157764: Better handling of interpolation plugins + S8158302: Handle contextual glyph substitutions + S8158993, CVE-2016-5568: Service Menu services (bsc#1005525) + S8159495: Fix index offsets + S8159503: Amend Annotation Actions + S8159511: Stack map validation + S8159515: Improve indy validation + S8159519, CVE-2016-5573: Reformat JDWP messages (bsc#1005526) + S8160090: Better signature handling in pack200 + S8160094: Improve pack200 layout + S8160098: Clean up color profiles + S8160591, CVE-2016-5582: Improve internal array handling (bsc#1005527) + S8160838, CVE-2016-5597: Better HTTP service (bsc#1005528) + PR3206, RH1367357: lcms2: Out-of-bounds read in Type_MLU_Read() + CVE-2016-5556 (bsc#1005524) * New features + PR1370: Provide option to build without debugging + PR1375: Provide option to strip and link debugging info after build + PR1537: Handle alternative Kerberos credential cache locations + PR1978: Allow use of system PCSC + PR2445: Support system libsctp + PR3182: Support building without pre-compiled headers + PR3183: Support Fedora/RHEL system crypto policy + PR3221: Use pkgconfig to detect Kerberos CFLAGS and libraries * Import of OpenJDK 8 u102 build 14 + S4515292: ReferenceType.isStatic() returns true for arrays + S4858370: JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S6976636: JVM/TI test ex03t001 fails assertion + S7185591: jcmd-big-script.sh ERROR: could not find app's Java pid. + S8017462: G1: guarantee fails with UseDynamicNumberOfGCThreads + S8034168: ThreadMXBean/Locks.java failed, blocked on wrong object + S8036006: [TESTBUG] sun/tools/native2ascii/NativeErrors.java fails: Process exit code was 0, but error was expected. + S8041781: Need new regression tests for PBE keys + S8041787: Need new regressions tests for buffer handling for PBE algorithms + S8043836: Need new tests for AES cipher + S8044199: Tests for RSA keys and key specifications + S8044772: TempDirTest.java still times out with -Xcomp + S8046339: sun.rmi.transport.DGCAckHandler leaks memory + S8047031: Add SocketPermission tests for legacy socket types + S8048052: Permission tests for setFactory + S8048138: Tests for JAAS callbacks + S8048147: Privilege tests with JAAS Subject.doAs + S8048356: SecureRandom default provider tests + S8048357: PKCS basic tests + S8048360: Test signed jar files + S8048362: Tests for doPrivileged with accomplice + S8048596: Tests for AEAD ciphers + S8048599: Tests for key wrap and unwrap operations + S8048603: Additional tests for MAC algorithms + S8048604: Tests for strong crypto ciphers + S8048607: Test key generation of DES and DESEDE + S8048610: Implement regression test for bug fix of 4686632 in JCE + S8048617: Tests for PKCS12 read operations + S8048618: Tests for PKCS12 write operations. + S8048619: Implement tests for converting PKCS12 keystores + S8048624: Tests for SealedObject + S8048819: Implement reliability test for DH algorithm + S8048820: Implement tests for SecretKeyFactory + S8048830: Implement tests for new functionality provided in JEP 166 + S8049237: Need new tests for X509V3 certificates + S8049321: Support SHA256WithDSA in JSSE + S8049429: Tests for java client server communications with various TLS/SSL combinations. + S8049432: New tests for TLS property jdk.tls.client.protocols + S8049814: Additional SASL client-server tests + S8050281: New permission tests for JEP 140 + S8050370: Need new regressions tests for messageDigest with DigestIOStream + S8050371: More MessageDigest tests + S8050374: More Signature tests + S8050427: LoginContext tests to cover JDK-4703361 + S8050460: JAAS login/logout tests with LoginContext + S8050461: Tests for syntax checking of JAAS configuration file + S8054278: Refactor jps utility tests + S8055530: assert(_exits.control()->is_top() || !_gvn.type(ret_phi)->empty()) failed: return value must be well defined + S8055844: [TESTBUG] test/runtime/NMT/VirtualAllocCommitUncommitRecommit.java fails on Solaris Sparc due to incorrect page size being used + S8059677: Thread.getName() instantiates Strings + S8061464: A typo in CipherTestUtils test + S8062536: [TESTBUG] Conflicting GC combinations in jdk tests + S8065076: java/net/SocketPermission/SocketPermissionTest.java fails intermittently + S8065078: NetworkInterface.getNetworkInterfaces() triggers intermittent test failures + S8066871: java.lang.VerifyError: Bad local variable type - local final String + S8068427: Hashtable deserialization reconstitutes table with wrong capacity + S8069038: javax/net/ssl/TLS/TLSClientPropertyTest.java needs to be updated for JDK-8061210 + S8069253: javax/net/ssl/TLS/TestJSSE.java failed on Mac + S8071125: Improve exception messages in URLPermission + S8072081: Supplementary characters are rejected in comments + S8072463: Remove requirement that AKID and SKID have to match when building certificate chain + S8072725: Provide more granular levels for GC verification + S8073400: Some Monospaced logical fonts have a different width + S8073872: Schemagen fails with StackOverflowError if element references containing class + S8074931: Additional tests for CertPath API + S8075286: Additional tests for signature algorithm OIDs and transformation string + S8076486: [TESTBUG] javax/security/auth/Subject/doAs/NestedActions.java fails if extra VM options are given + S8076545: Text size is twice bigger under Windows L&F on Win 8.1 with HiDPI display + S8076995: gc/ergonomics/TestDynamicNumberOfGCThreads.java failed with java.lang.RuntimeException: 'new_active_workers' missing from stdout/stderr + S8079138: Additional negative tests for XML signature processing + S8081512: Remove sun.invoke.anon classes, or move / co-locate them with tests + S8081771: ProcessTool.createJavaProcessBuilder() needs new addTestVmAndJavaOptions argument + S8129419: heapDumper.cpp: assert(length_in_bytes > 0) failed: nothing to copy + S8130150: Implement BigInteger.montgomeryMultiply intrinsic + S8130242: DataFlavorComparator transitivity exception + S8130304: Inference: NodeNotFoundException thrown with deep generic method call chain + S8130425: libjvm crash due to stack overflow in executables with 32k tbss/tdata + S8133023: ParallelGCThreads is not calculated correctly + S8134111: Unmarshaller unmarshalls XML element which doesn't have the expected namespace + S8135259: InetAddress.getAllByName only reports "unknown error" instead of actual cause + S8136506: Include sun.arch.data.model as a property that can be queried by jtreg + S8137068: Tests added in JDK-8048604 fail to compile + S8139040: Fix initializations before ShouldNotReachHere() etc. and enable -Wuninitialized on linux. + S8139581: AWT components are not drawn after removal and addition to a container + S8141243: Unexpected timezone returned after parsing a date + S8141420: Compiler runtime entries don't hold Klass* from being GCed + S8141445: Use of Solaris/SPARC M7 libadimalloc.so can generate unknown signal in hs_err file + S8141551: C2 can not handle returns with inccompatible interface arrays + S8143377: Test PKCS8Test.java fails + S8143647: Javac compiles method reference that allows results in an IllegalAccessError + S8144144: ORB destroy() leaks filedescriptors after unsuccessful connection + S8144593: Suppress not recognized property/feature warning messages from SAXParser + S8144957: Remove PICL warning message + S8145039: JAXB marshaller fails with ClassCastException on classes generated by xjc + S8145228: Java Access Bridge, getAccessibleStatesStringFromContext doesn't wrap the call to getAccessibleRole + S8145388: URLConnection.guessContentTypeFromStream returns image/jpg for some JPEG images + S8145974: XMLStreamWriter produces invalid XML for surrogate pairs on OutputStreamWriter + S8146035: Windows - With LCD antialiasing, some glyphs are not rendered correctly + S8146192: Add test for JDK-8049321 + S8146274: Thread spinning on WeakHashMap.getEntry() with concurrent use of nashorn + S8147468: Allow users to bound the size of buffers cached in the per-thread buffer caches + S8147645: get_ctrl_no_update() code is wrong + S8147807: crash in libkcms.so on linux-sparc + S8148379: jdk.nashorn.api.scripting spec. adjustments, clarifications + S8148627: RestrictTestMaxCachedBufferSize.java to 64-bit platforms + S8148820: Missing @since Javadoc tag in Logger.log(Level, Supplier) + S8148926: Call site profiling fails on braces-wrapped anonymous function + S8149017: Delayed provider selection broken in RSA client key exchange + S8149029: Secure validation of XML based digital signature always enabled when checking wrapping attacks + S8149330: Capacity of StringBuilder should not get close to Integer.MAX_VALUE unless necessary + S8149334: JSON.parse(JSON.stringify([])).push(10) creates an array containing two elements + S8149368: [hidpi] JLabel font is twice bigger than JTextArea font on Windows 7,HiDPI, Windows L&F + S8149411: PKCS12KeyStore cannot extract AES Secret Keys + S8149417: Use final restricted flag + S8149450: LdapCtx.processReturnCode() throwing Null Pointer Exception + S8149453: [hidpi] JFileChooser does not scale properly on Windows with HiDPI display and Windows L&F + S8149543: range check CastII nodes should not be split through Phi + S8149743: JVM crash after debugger hotswap with lambdas + S8149744: fix testng.jar delivery in Nashorn build.xml + S8149915: enabling validate-annotations feature for xsd schema with annotation causes NPE + S8150002: Check for the validity of oop before printing it in verify_remembered_set + S8150470: JCK: api/xsl/conf/copy/copy19 test failure + S8150518: G1 GC crashes at G1CollectedHeap::do_collection_pause_at_safepoint(double) + S8150533: Test java/util/logging/LogManagerAppContextDeadlock.java times out intermittently. + S8150704: XALAN: ERROR: 'No more DTM IDs are available' when transforming with lots of temporary result trees + S8150780: Repeated offer and remove on ConcurrentLinkedQueue lead to an OutOfMemoryError + S8151064: com/sun/jdi/RedefineAddPrivateMethod.sh fails intermittently + S8151197: [TEST_BUG] Need to backport fix for test/javax/net/ssl/TLS/TestJSSE.java + S8151352: jdk/test/sample fails with "effective library path is outside the test suite" + S8151431: DateFormatSymbols triggers this.clone() in the constructor + S8151535: TESTBUG: java/lang/invoke/AccessControlTest.java should be modified to run with JTREG 4.1 b13 + S8151731: Add new jtreg keywords to jdk 8 + S8151998: VS2010 ThemeReader.cpp(758) : error C3861: 'round': identifier not found + S8152927: Incorrect GPL header in StubFactoryDynamicBase.java reported + S8153252: SA: Hotspot build on Windows fails if make/closed folder does not exist + S8153531: Improve exception messaging for RSAClientKeyExchange + S8153641: assert(thread_state == _thread_in_native) failed: Assumed thread_in_native while heap dump + S8153673: [BACKOUT] JDWP: Memory Leak: GlobalRefs never deleted when processing invokeMethod command + S8154304: NullpointerException at LdapReferralException.getReferralContext + S8154722: Test gc/ergonomics/TestDynamicNumberOfGCThreads.java fails + S8157078: 8u102 L10n resource file updates + S8157838: Personalized Windows Font Size is not taken into account in Java8u102 * Import of OpenJDK 8 u111 build 14 + S6882559: new JEditorPane("text/plain","") fails for null context class loader + S8049171: Additional tests for jarsigner's warnings + S8063086: Math.pow yields different results upon repeated calls + S8140530: Creating a VolatileImage with size 0,0 results in no longer working g2d.drawString + S8142926: OutputAnalyzer's shouldXXX() calls return this + S8147077: IllegalArgumentException thrown by api/java_awt/Component/FlipBufferStrategy/indexTGF_General + S8148127: IllegalArgumentException thrown by JCK test api/java_awt/Component/FlipBufferStrategy/indexTGF_General in opengl pipeline + S8150611: Security problem on sun.misc.resources.Messages* + S8153399: Constrain AppCDS behavior (back port) + S8157653: [Parfait] Uninitialised variable in awt_Font.cpp + S8158734: JEditorPane.createEditorKitForContentType throws NPE after 6882559 + S8158994: Service Menu services + S8159684: (tz) Support tzdata2016f + S8160904: Typo in code from 8079718 fix : enableCustomValueHanlde + S8160934: isnan() is not available on older MSVC compilers + S8161141: correct bugId for JDK-8158994 fix push + S8162411: Service Menu services 2 + S8162419: closed/com/oracle/jfr/runtime/TestVMInfoEvent.sh failing after JDK-8155968 + S8162511: 8u111 L10n resource file updates + S8162792: Remove constraint DSA keySize < 1024 from jdk.jar.disabledAlgorithms in jdk8 + S8164452: 8u111 L10n resource file update - msgdrop 20 + S8165816: jarsigner -verify shows jar unsigned if it was signed with a weak algorithm + S8166381: Back out changes to the java.security file to not disable MD5 * Backports + S8078628, PR3208: Zero build fails with pre-compiled headers disabled + S8141491, PR3159, G592292: Unaligned memory access in Bits.c + S8157306, PR3121: Random infrequent null pointer exceptions in javac (enabled on AArch64 only) + S8162384, PR3122: Performance regression: bimorphic inlining may be bypassed by type speculation * Bug fixes + PR3123: Some object files built without -fPIC on x86 only + PR3126: pax-mark-vm script calls "exit -1" which is invalid in dash + PR3127, G590348: Only apply PaX markings by default on running PaX kernels + PR3199: Invalid nashorn URL + PR3201: Update infinality configure test + PR3218: PR3159 leads to build failure on clean tree * AArch64 port + S8131779, PR3220: AARCH64: add Montgomery multiply intrinsic + S8167200, PR3220: AArch64: Broken stack pointer adjustment in interpreter + S8167421, PR3220: AArch64: in one core system, fatal error: Illegal threadstate encountered + S8167595, PR3220: AArch64: SEGV in stub code cipherBlockChaining_decryptAESCrypt + S8168888, PR3220: Port 8160591: Improve internal array handling to AArch64. * Shenandoah + PR3224: Shenandoah broken when building without pre-compiled headers - Build against system kerberos - Build against system pcsc and sctp - S8158260, PR2991, RH1341258: PPC64: unaligned Unsafe.getInt can lead to the generation of illegal instructions (bsc#988651) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1380=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1380=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): java-1_8_0-openjdk-1.8.0.111-3.1 java-1_8_0-openjdk-accessibility-1.8.0.111-3.1 java-1_8_0-openjdk-debuginfo-1.8.0.111-3.1 java-1_8_0-openjdk-debugsource-1.8.0.111-3.1 java-1_8_0-openjdk-demo-1.8.0.111-3.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.111-3.1 java-1_8_0-openjdk-devel-1.8.0.111-3.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.111-3.1 java-1_8_0-openjdk-headless-1.8.0.111-3.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.111-3.1 java-1_8_0-openjdk-src-1.8.0.111-3.1 - openSUSE Leap 42.2 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.111-3.1 - openSUSE Leap 42.1 (i586 x86_64): java-1_8_0-openjdk-1.8.0.111-18.1 java-1_8_0-openjdk-accessibility-1.8.0.111-18.1 java-1_8_0-openjdk-debuginfo-1.8.0.111-18.1 java-1_8_0-openjdk-debugsource-1.8.0.111-18.1 java-1_8_0-openjdk-demo-1.8.0.111-18.1 java-1_8_0-openjdk-demo-debuginfo-1.8.0.111-18.1 java-1_8_0-openjdk-devel-1.8.0.111-18.1 java-1_8_0-openjdk-devel-debuginfo-1.8.0.111-18.1 java-1_8_0-openjdk-headless-1.8.0.111-18.1 java-1_8_0-openjdk-headless-debuginfo-1.8.0.111-18.1 java-1_8_0-openjdk-src-1.8.0.111-18.1 - openSUSE Leap 42.1 (noarch): java-1_8_0-openjdk-javadoc-1.8.0.111-18.1 References: https://www.suse.com/security/cve/CVE-2016-5542.html https://www.suse.com/security/cve/CVE-2016-5554.html https://www.suse.com/security/cve/CVE-2016-5556.html https://www.suse.com/security/cve/CVE-2016-5568.html https://www.suse.com/security/cve/CVE-2016-5573.html https://www.suse.com/security/cve/CVE-2016-5582.html https://www.suse.com/security/cve/CVE-2016-5597.html https://bugzilla.suse.com/1005522 https://bugzilla.suse.com/1005523 https://bugzilla.suse.com/1005524 https://bugzilla.suse.com/1005525 https://bugzilla.suse.com/1005526 https://bugzilla.suse.com/1005527 https://bugzilla.suse.com/1005528 https://bugzilla.suse.com/988651

1 0

openSUSE-RU-2016:2984-1: Recommended update for boost_1_58_0
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for boost_1_58_0 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2984-1 Rating: low References: #974690 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for boost_1_58_0 fixes the following issues: - boost_1_58_0-devel now provides boost-devel and conflicts with other providers of boost-devel (boo#974690) - fix baselibs.conf so it lists packages actually produced Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1385=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1385=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): boost_1_58_0-debugsource-1.58.0-4.1 boost_1_58_0-devel-1.58.0-4.1 libboost_atomic1_58_0-1.58.0-4.1 libboost_atomic1_58_0-debuginfo-1.58.0-4.1 libboost_chrono1_58_0-1.58.0-4.1 libboost_chrono1_58_0-debuginfo-1.58.0-4.1 libboost_container1_58_0-1.58.0-4.1 libboost_container1_58_0-debuginfo-1.58.0-4.1 libboost_context1_58_0-1.58.0-4.1 libboost_context1_58_0-debuginfo-1.58.0-4.1 libboost_coroutine1_58_0-1.58.0-4.1 libboost_coroutine1_58_0-debuginfo-1.58.0-4.1 libboost_date_time1_58_0-1.58.0-4.1 libboost_date_time1_58_0-debuginfo-1.58.0-4.1 libboost_filesystem1_58_0-1.58.0-4.1 libboost_filesystem1_58_0-debuginfo-1.58.0-4.1 libboost_graph1_58_0-1.58.0-4.1 libboost_graph1_58_0-debuginfo-1.58.0-4.1 libboost_graph_parallel1_58_0-1.58.0-4.1 libboost_graph_parallel1_58_0-debuginfo-1.58.0-4.1 libboost_iostreams1_58_0-1.58.0-4.1 libboost_iostreams1_58_0-debuginfo-1.58.0-4.1 libboost_locale1_58_0-1.58.0-4.1 libboost_locale1_58_0-debuginfo-1.58.0-4.1 libboost_log1_58_0-1.58.0-4.1 libboost_log1_58_0-debuginfo-1.58.0-4.1 libboost_math1_58_0-1.58.0-4.1 libboost_math1_58_0-debuginfo-1.58.0-4.1 libboost_mpi1_58_0-1.58.0-4.1 libboost_mpi1_58_0-debuginfo-1.58.0-4.1 libboost_program_options1_58_0-1.58.0-4.1 libboost_program_options1_58_0-debuginfo-1.58.0-4.1 libboost_python1_58_0-1.58.0-4.1 libboost_python1_58_0-debuginfo-1.58.0-4.1 libboost_random1_58_0-1.58.0-4.1 libboost_random1_58_0-debuginfo-1.58.0-4.1 libboost_regex1_58_0-1.58.0-4.1 libboost_regex1_58_0-debuginfo-1.58.0-4.1 libboost_serialization1_58_0-1.58.0-4.1 libboost_serialization1_58_0-debuginfo-1.58.0-4.1 libboost_signals1_58_0-1.58.0-4.1 libboost_signals1_58_0-debuginfo-1.58.0-4.1 libboost_system1_58_0-1.58.0-4.1 libboost_system1_58_0-debuginfo-1.58.0-4.1 libboost_test1_58_0-1.58.0-4.1 libboost_test1_58_0-debuginfo-1.58.0-4.1 libboost_thread1_58_0-1.58.0-4.1 libboost_thread1_58_0-debuginfo-1.58.0-4.1 libboost_timer1_58_0-1.58.0-4.1 libboost_timer1_58_0-debuginfo-1.58.0-4.1 libboost_wave1_58_0-1.58.0-4.1 libboost_wave1_58_0-debuginfo-1.58.0-4.1 quickbook_1_58_0-1.58.0-4.1 quickbook_1_58_0-debuginfo-1.58.0-4.1 - openSUSE Leap 42.2 (x86_64): boost_1_58_0-devel-32bit-1.58.0-4.1 libboost_atomic1_58_0-32bit-1.58.0-4.1 libboost_atomic1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_container1_58_0-32bit-1.58.0-4.1 libboost_container1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_context1_58_0-32bit-1.58.0-4.1 libboost_context1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_coroutine1_58_0-32bit-1.58.0-4.1 libboost_coroutine1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_date_time1_58_0-32bit-1.58.0-4.1 libboost_date_time1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_filesystem1_58_0-32bit-1.58.0-4.1 libboost_filesystem1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_graph1_58_0-32bit-1.58.0-4.1 libboost_graph1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_graph_parallel1_58_0-32bit-1.58.0-4.1 libboost_graph_parallel1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_iostreams1_58_0-32bit-1.58.0-4.1 libboost_iostreams1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_math1_58_0-32bit-1.58.0-4.1 libboost_math1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_mpi1_58_0-32bit-1.58.0-4.1 libboost_mpi1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_program_options1_58_0-32bit-1.58.0-4.1 libboost_program_options1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_python1_58_0-32bit-1.58.0-4.1 libboost_python1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_random1_58_0-32bit-1.58.0-4.1 libboost_random1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_regex1_58_0-32bit-1.58.0-4.1 libboost_regex1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_serialization1_58_0-32bit-1.58.0-4.1 libboost_serialization1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_signals1_58_0-32bit-1.58.0-4.1 libboost_signals1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_system1_58_0-32bit-1.58.0-4.1 libboost_system1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_test1_58_0-32bit-1.58.0-4.1 libboost_test1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_thread1_58_0-32bit-1.58.0-4.1 libboost_thread1_58_0-debuginfo-32bit-1.58.0-4.1 libboost_wave1_58_0-32bit-1.58.0-4.1 libboost_wave1_58_0-debuginfo-32bit-1.58.0-4.1 - openSUSE Leap 42.2 (noarch): boost-license1_58_0-1.58.0-4.1 boost_1_58_0-doc-html-1.58.0-4.1 boost_1_58_0-doc-pdf-1.58.0-4.1 - openSUSE Leap 42.1 (i586 x86_64): boost_1_58_0-debugsource-1.58.0-3.1 boost_1_58_0-devel-1.58.0-3.1 libboost_atomic1_58_0-1.58.0-3.1 libboost_atomic1_58_0-debuginfo-1.58.0-3.1 libboost_chrono1_58_0-1.58.0-3.1 libboost_chrono1_58_0-debuginfo-1.58.0-3.1 libboost_container1_58_0-1.58.0-3.1 libboost_container1_58_0-debuginfo-1.58.0-3.1 libboost_context1_58_0-1.58.0-3.1 libboost_context1_58_0-debuginfo-1.58.0-3.1 libboost_coroutine1_58_0-1.58.0-3.1 libboost_coroutine1_58_0-debuginfo-1.58.0-3.1 libboost_date_time1_58_0-1.58.0-3.1 libboost_date_time1_58_0-debuginfo-1.58.0-3.1 libboost_filesystem1_58_0-1.58.0-3.1 libboost_filesystem1_58_0-debuginfo-1.58.0-3.1 libboost_graph1_58_0-1.58.0-3.1 libboost_graph1_58_0-debuginfo-1.58.0-3.1 libboost_graph_parallel1_58_0-1.58.0-3.1 libboost_graph_parallel1_58_0-debuginfo-1.58.0-3.1 libboost_iostreams1_58_0-1.58.0-3.1 libboost_iostreams1_58_0-debuginfo-1.58.0-3.1 libboost_locale1_58_0-1.58.0-3.1 libboost_locale1_58_0-debuginfo-1.58.0-3.1 libboost_log1_58_0-1.58.0-3.1 libboost_log1_58_0-debuginfo-1.58.0-3.1 libboost_math1_58_0-1.58.0-3.1 libboost_math1_58_0-debuginfo-1.58.0-3.1 libboost_mpi1_58_0-1.58.0-3.1 libboost_mpi1_58_0-debuginfo-1.58.0-3.1 libboost_program_options1_58_0-1.58.0-3.1 libboost_program_options1_58_0-debuginfo-1.58.0-3.1 libboost_python1_58_0-1.58.0-3.1 libboost_python1_58_0-debuginfo-1.58.0-3.1 libboost_random1_58_0-1.58.0-3.1 libboost_random1_58_0-debuginfo-1.58.0-3.1 libboost_regex1_58_0-1.58.0-3.1 libboost_regex1_58_0-debuginfo-1.58.0-3.1 libboost_serialization1_58_0-1.58.0-3.1 libboost_serialization1_58_0-debuginfo-1.58.0-3.1 libboost_signals1_58_0-1.58.0-3.1 libboost_signals1_58_0-debuginfo-1.58.0-3.1 libboost_system1_58_0-1.58.0-3.1 libboost_system1_58_0-debuginfo-1.58.0-3.1 libboost_test1_58_0-1.58.0-3.1 libboost_test1_58_0-debuginfo-1.58.0-3.1 libboost_thread1_58_0-1.58.0-3.1 libboost_thread1_58_0-debuginfo-1.58.0-3.1 libboost_timer1_58_0-1.58.0-3.1 libboost_timer1_58_0-debuginfo-1.58.0-3.1 libboost_wave1_58_0-1.58.0-3.1 libboost_wave1_58_0-debuginfo-1.58.0-3.1 quickbook_1_58_0-1.58.0-3.1 quickbook_1_58_0-debuginfo-1.58.0-3.1 - openSUSE Leap 42.1 (x86_64): boost_1_58_0-devel-32bit-1.58.0-3.1 libboost_atomic1_58_0-32bit-1.58.0-3.1 libboost_atomic1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_container1_58_0-32bit-1.58.0-3.1 libboost_container1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_context1_58_0-32bit-1.58.0-3.1 libboost_context1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_coroutine1_58_0-32bit-1.58.0-3.1 libboost_coroutine1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_date_time1_58_0-32bit-1.58.0-3.1 libboost_date_time1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_filesystem1_58_0-32bit-1.58.0-3.1 libboost_filesystem1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_graph1_58_0-32bit-1.58.0-3.1 libboost_graph1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_graph_parallel1_58_0-32bit-1.58.0-3.1 libboost_graph_parallel1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_iostreams1_58_0-32bit-1.58.0-3.1 libboost_iostreams1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_math1_58_0-32bit-1.58.0-3.1 libboost_math1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_mpi1_58_0-32bit-1.58.0-3.1 libboost_mpi1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_program_options1_58_0-32bit-1.58.0-3.1 libboost_program_options1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_python1_58_0-32bit-1.58.0-3.1 libboost_python1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_random1_58_0-32bit-1.58.0-3.1 libboost_random1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_regex1_58_0-32bit-1.58.0-3.1 libboost_regex1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_serialization1_58_0-32bit-1.58.0-3.1 libboost_serialization1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_signals1_58_0-32bit-1.58.0-3.1 libboost_signals1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_system1_58_0-32bit-1.58.0-3.1 libboost_system1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_test1_58_0-32bit-1.58.0-3.1 libboost_test1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_thread1_58_0-32bit-1.58.0-3.1 libboost_thread1_58_0-debuginfo-32bit-1.58.0-3.1 libboost_wave1_58_0-32bit-1.58.0-3.1 libboost_wave1_58_0-debuginfo-32bit-1.58.0-3.1 - openSUSE Leap 42.1 (noarch): boost-license1_58_0-1.58.0-3.1 boost_1_58_0-doc-html-1.58.0-3.1 boost_1_58_0-doc-pdf-1.58.0-3.1 References: https://bugzilla.suse.com/974690

1 0

openSUSE-SU-2016:2983-1: moderate: Security update for sudo
by opensuse-security＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2983-1 Rating: moderate References: #1007501 #1007766 #899252 #979531 Cross-References: CVE-2014-9680 CVE-2016-7032 CVE-2016-7076 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for sudo fixes the following issues: - fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501] Sudo was updated to the package from SUSE:SLE-12-SP2:Update, incorporating the following new feature: - allow dynamic groups with sudo [fate#318850] The following bug fixes are included: - parse /proc/stat for boottime correctly [boo#899252] - enable SASL authentication [boo#979531] Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1381=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): sudo-1.8.10p3-7.1 sudo-debuginfo-1.8.10p3-7.1 sudo-debugsource-1.8.10p3-7.1 sudo-devel-1.8.10p3-7.1 sudo-test-1.8.10p3-7.1 References: https://www.suse.com/security/cve/CVE-2014-9680.html https://www.suse.com/security/cve/CVE-2016-7032.html https://www.suse.com/security/cve/CVE-2016-7076.html https://bugzilla.suse.com/1007501 https://bugzilla.suse.com/1007766 https://bugzilla.suse.com/899252 https://bugzilla.suse.com/979531

1 0

openSUSE-RU-2016:2982-1: moderate: Recommended update for open-iscsi
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for open-iscsi ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2982-1 Rating: moderate References: #897297 #989548 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for open-iscsi provides the following fixes: - Prevent open-isns from adding duplicated entries to the database. (bsc#897297) - Also stop manual sessions when shutting down the iSCSI service. (bsc#989548) This update was imported from the SUSE:SLE-12-SP1:Update and SUSE:SLE-12-SP2:Update update projects. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1383=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1383=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): iscsiuio-0.7.8.2-43.1 iscsiuio-debuginfo-0.7.8.2-43.1 open-iscsi-2.0.873-43.1 open-iscsi-debuginfo-2.0.873-43.1 open-iscsi-debugsource-2.0.873-43.1 open-isns-0.95-43.1 open-isns-debuginfo-0.95-43.1 - openSUSE Leap 42.1 (i586 x86_64): iscsiuio-0.7.8.2-43.1 iscsiuio-debuginfo-0.7.8.2-43.1 open-iscsi-2.0.873-43.1 open-iscsi-debuginfo-2.0.873-43.1 open-iscsi-debugsource-2.0.873-43.1 open-isns-0.90-43.1 open-isns-debuginfo-0.90-43.1 References: https://bugzilla.suse.com/897297 https://bugzilla.suse.com/989548

1 0

openSUSE-RU-2016:2981-1: Recommended update for ypserv
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for ypserv ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2981-1 Rating: low References: #1011483 #983938 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for ypserv fixes the following issues: - Use _PATH_VARRUN from paths.h. (boo#1011483) - Remove syslog.target from *.service files. (boo#983938) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1379=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ypserv-4.0-3.1 ypserv-debuginfo-4.0-3.1 ypserv-debugsource-4.0-3.1 References: https://bugzilla.suse.com/1011483 https://bugzilla.suse.com/983938

1 0

openSUSE-RU-2016:2980-1: moderate: Recommended update for khelpcenter5
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for khelpcenter5 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2980-1 Rating: moderate References: #1011094 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for khelpcenter5 fixes the following issues: - Requires kdoctools which contains some images and stylesheets used by khelpcenter5. (boo#1011094) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1384=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): khelpcenter5-16.08.2-3.1 khelpcenter5-debuginfo-16.08.2-3.1 khelpcenter5-debugsource-16.08.2-3.1 References: https://bugzilla.suse.com/1011094

1 0

openSUSE-RU-2016:2979-1: moderate: Recommended update for crmsh
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for crmsh ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2979-1 Rating: moderate References: #1001164 #996806 #999683 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for crmsh to version 2.2.0+git.1476084519.a000372 fixes the following issues: - high: cibconfig: Ensure temp CIB is readable by crm_diff (bsc#999683) - high: parse: Support target pattern in fencing topology - medium: ui_configure: option to obscure passwords - medium: cibconfig: Remove from tags when removing object - medium: scripts: Better corosync defaults (bsc#1001164) - medium: scripts: Drop logrotate check from cluster health - medium: corosync: Fix missing variable in del-node - low: cmd_status: Highlight plural forms (bsc#996806) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1382=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): crmsh-2.2.0+git.1476084519.a000372-3.1 crmsh-scripts-2.2.0+git.1476084519.a000372-3.1 crmsh-test-2.2.0+git.1476084519.a000372-3.1 References: https://bugzilla.suse.com/1001164 https://bugzilla.suse.com/996806 https://bugzilla.suse.com/999683

1 0

openSUSE-RU-2016:2978-1: moderate: Recommended update for wicked
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for wicked ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2978-1 Rating: moderate References: #865573 #902897 #913861 #916613 #916948 #972471 #973355 #974231 #975466 #981887 #982231 #982952 #984088 #985894 #988794 #988954 #989741 #997027 #998413 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has 19 recommended fixes can now be installed. Description: This update provides Wicked 0.6.39, which brings the following fixes and enhancements: - dhcp: Support to define and request custom options. (boo#988954) - dhcp6: Fix refresh on newprefix workaround. (boo#972471) - dhcp4: Do not fail in capture on link type change. (boo#975466) - dhcp4: Ignore invalid options, do not discard complete message. - dhcp4: Log and add sender (server or relay) ethernet hw-address to the lease. - ifdown: Show reasons to skip an action. (boo#997027) - ifconfig: Fix to consider address scope in dbus model. (boo#988794) - bonding: Set the primary slave in the master at enslave of the primary when it were not yet ready while bond setup. (boo#998413) - dhcp: Fixed to properly append dhcp option data. (boo#988954) - addrconf: Rewrite to run lease updates in background jobs and use netconfig 0.84 batch support if available (boo#989741). Fixed auto4 and dhcp supplicants to explicitly stop device before un-registering dbus object to disarm it and return release request result before sensing the released event. Fixed fsm to not advance fsm state on unrelated events and use new call to refresh addresses from kernel for tentative checks in ifup. - auto6: Do not apply rdnss/dnssl if autoconf=0. (boo#984088) - addrconf: Utility to parse string with update flags. - leasefile: Added an lease file exists utility. - ifstatus: Show IPv6 privacy addresses as autoconf. - updater: Adjusted system settings update debug info. - updater: No remove before install on granted lease. - updater: No backup/restore for netconfig, unused. - updater: No warning on unset optional backup/restore. - man: Added DHCLIENT_REQUEST_OPTION to ifcfg-dhcp. - leaseinfo: Dump other/unknown dhcp options. - dhcp4: Initial support to request custom options. (boo#916948, boo#988954) - lease: Store and load other/unknown dhcp options. - utils: Fixed last byte formatting in ni_format_hex. - dbus: Handle unparsed dhcp options in leases. - dhcp4: Store unparsed options in the lease. - addrconf: Add generic dhcp options to lease. - dhcp: Move specific dhcp.h to dhcp4.h and dhcp6.h. - ovs: Use generic ovs type until we can query ovs. (boo#982231) - dhcp4: Send hostname in discover. (boo#985894) - ifconfig: Fixed to apply address preferred_lft 0. - address: Apply suse ifcfg IP_OPTIONS. (boo#984088) - config: Add a global LINK_REQUIRED ifcfg default. - client: Apply global LINK_REQUIRED setting if any. - ifreload: Make output more informative. (boo#982952) - rules: Do not fail when kernel support is missed. (boo#981887) - nanny: Reapply policies on device renames. (boo#973355) - iflist: Fixed macvlan/macvtap link info data parsing. - auto6: Apply rdnss/dnssl and wait for autoconf. (boo#902897, boo#916613) - spec: Removed ppp service template macro calls. (fate#317976) - bonding: Support for new v3.7.1 netlink options in 4.4 kernel. - linux: Update included headers to 4.4, add if_addr.h. - utils: Fix for ni_string_set to set empty pointers. - team: Fix for unclosed file descriptor and string memory leak. - ppp: Initial implementation of PPPoE support. (fate#317976, boo#865573, boo#913861) - route: Initial routing policy rules support. (fate#312217) - tunnel: Add device binding support. (fate#317977) - gre: Fix flags use, added missed keyed gre options. - doc: Added an initial FAQ to the documentation. - util: Fix null string and string array in compare. - ipv6: Cleaned up IPv6 RA PI and RDNSS processing. - ipv6: Receive IPv6 RA DNSSL options forwarded by kernel. - dhcp6: Refresh ipv6 link on each prefix event to fix workaround for missed NEWLINK event on changes caused by RA. (boo#972471) - macvlan: Fix enum values for BRIDGE and PASSTHRU modes. (boo#974231) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1386=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1386=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libwicked-0-6-0.6.39-12.1 libwicked-0-6-debuginfo-0.6.39-12.1 wicked-0.6.39-12.1 wicked-debuginfo-0.6.39-12.1 wicked-debugsource-0.6.39-12.1 wicked-service-0.6.39-12.1 - openSUSE 13.2 (i586 x86_64): libwicked-0-6-0.6.39-36.1 libwicked-0-6-debuginfo-0.6.39-36.1 wicked-0.6.39-36.1 wicked-debuginfo-0.6.39-36.1 wicked-debugsource-0.6.39-36.1 wicked-service-0.6.39-36.1 References: https://bugzilla.suse.com/865573 https://bugzilla.suse.com/902897 https://bugzilla.suse.com/913861 https://bugzilla.suse.com/916613 https://bugzilla.suse.com/916948 https://bugzilla.suse.com/972471 https://bugzilla.suse.com/973355 https://bugzilla.suse.com/974231 https://bugzilla.suse.com/975466 https://bugzilla.suse.com/981887 https://bugzilla.suse.com/982231 https://bugzilla.suse.com/982952 https://bugzilla.suse.com/984088 https://bugzilla.suse.com/985894 https://bugzilla.suse.com/988794 https://bugzilla.suse.com/988954 https://bugzilla.suse.com/989741 https://bugzilla.suse.com/997027 https://bugzilla.suse.com/998413

1 0

openSUSE-RU-2016:2967-1: Recommended update for timezone
by maintenance＠opensuse.org 02 Dec '16

02 Dec '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2967-1 Rating: low References: #1011797 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016j) for your system, including the following changes: - Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00. This change introduces a new zone Europe/Saratov split from Europe/Volgograd. This release also includes changes affecting past time stamps. For a comprehensive list, please refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz-announce/2016-November/000044.html This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1378=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1378=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): timezone-2016j-34.1 timezone-debuginfo-2016j-34.1 timezone-debugsource-2016j-34.1 - openSUSE Leap 42.2 (noarch): timezone-java-2016j-0.34.1 - openSUSE Leap 42.1 (i586 x86_64): timezone-2016j-34.1 timezone-debuginfo-2016j-34.1 timezone-debugsource-2016j-34.1 - openSUSE Leap 42.1 (noarch): timezone-java-2016j-0.34.1 References: https://bugzilla.suse.com/1011797

1 0

openSUSE-RU-2016:2966-1: Recommended update for timezone
by maintenance＠opensuse.org 01 Dec '16

01 Dec '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2966-1 Rating: low References: #1011797 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides the latest timezone information (2016j) for your system, including the following changes: - Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00. This change introduces a new zone Europe/Saratov split from Europe/Volgograd. This release also includes changes affecting past time stamps. For a comprehensive list, please refer to the release announcement from ICANN: http://mm.icann.org/pipermail/tz-announce/2016-November/000044.html Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1377=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): timezone-2016j-63.1 timezone-debuginfo-2016j-63.1 timezone-debugsource-2016j-63.1 - openSUSE 13.2 (noarch): timezone-java-2016j-63.1 References: https://bugzilla.suse.com/1011797

1 0

openSUSE-SU-2016:2965-1: important: Security update for pacemaker
by opensuse-security＠opensuse.org 01 Dec '16

01 Dec '16

openSUSE Security Update: Security update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2965-1 Rating: important References: #1000743 #1002767 #1003565 #1007433 #967388 #986644 #987348 Cross-References: CVE-2016-7035 CVE-2016-7797 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has 5 fixes is now available. Description: This update for pacemaker fixes the following issues: Security issues fixed: - CVE-2016-7797: Notify other clients of a new connection only if the handshake has completed (bsc#967388, bsc#1002767). - CVE-2016-7035: Fixed improper IPC guarding in pacemaker (bsc#1007433). Bug fixes: - bsc#1003565: crmd: Record pending operations in the CIB before they are performed - bsc#1000743: pengine: Do not fence a maintenance node if it shuts down cleanly - bsc#987348: ping: Avoid temporary files for fping check - bsc#986644: libcrmcommon: report errors consistently when waiting for data on connection - bsc#986644: remote: Correctly calculate the remaining timeouts when receiving messages This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1376=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpacemaker-devel-1.1.15-5.1 libpacemaker3-1.1.15-5.1 libpacemaker3-debuginfo-1.1.15-5.1 pacemaker-1.1.15-5.1 pacemaker-cli-1.1.15-5.1 pacemaker-cli-debuginfo-1.1.15-5.1 pacemaker-cts-1.1.15-5.1 pacemaker-cts-debuginfo-1.1.15-5.1 pacemaker-debuginfo-1.1.15-5.1 pacemaker-debugsource-1.1.15-5.1 pacemaker-remote-1.1.15-5.1 pacemaker-remote-debuginfo-1.1.15-5.1 References: https://www.suse.com/security/cve/CVE-2016-7035.html https://www.suse.com/security/cve/CVE-2016-7797.html https://bugzilla.suse.com/1000743 https://bugzilla.suse.com/1002767 https://bugzilla.suse.com/1003565 https://bugzilla.suse.com/1007433 https://bugzilla.suse.com/967388 https://bugzilla.suse.com/986644 https://bugzilla.suse.com/987348

1 0

openSUSE-SU-2016:2962-1: moderate: Security update for libtcnative-1-0
by opensuse-security＠opensuse.org 01 Dec '16

01 Dec '16

openSUSE Security Update: Security update for libtcnative-1-0 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2962-1 Rating: moderate References: #1004455 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libtcnative-1-0 fixes the following issues: - Upgrade to libtcnative-1.1.34 (bugfix release) (bsc#1004455) See https://tomcat.apache.org/native-1.1-doc/miscellaneous/changelog.html * Unconditionally disable export Ciphers. * Improve ephemeral key handling for DH and ECDH. Parameter strength is by default derived from the certificate key strength. * APIs SSL.generateRSATempKey() and SSL.loadDSATempKey() are no longer supported. * Various bugfixes. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1375=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtcnative-1-0-1.1.34-9.1 libtcnative-1-0-debuginfo-1.1.34-9.1 libtcnative-1-0-debugsource-1.1.34-9.1 libtcnative-1-0-devel-1.1.34-9.1 - openSUSE Leap 42.1 (i586 x86_64): libtcnative-1-0-1.1.34-10.1 libtcnative-1-0-debuginfo-1.1.34-10.1 libtcnative-1-0-debugsource-1.1.34-10.1 libtcnative-1-0-devel-1.1.34-10.1 References: https://bugzilla.suse.com/1004455

1 0

openSUSE-SU-2016:2961-1: moderate: Security update for bash
by opensuse-security＠opensuse.org 01 Dec '16

01 Dec '16

openSUSE Security Update: Security update for bash ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2961-1 Rating: moderate References: #1000396 #1001299 #1001759 #898812 #898884 Cross-References: CVE-2014-6277 CVE-2014-6278 CVE-2016-0634 CVE-2016-7543 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves four vulnerabilities and has one errata is now available. Description: This update for bash fixes the following issues: - CVE-2016-7543: Local attackers could have executed arbitrary commands via specially crafted SHELLOPTS+PS4 variables (bsc#1001299) - CVE-2016-0634: Malicious hostnames could have allowed arbitrary command execution when $HOSTNAME was expanded in the prompt (bsc#1000396) - CVE-2014-6277: More troubles with functions (bsc#898812, bsc#1001759) - CVE-2014-6278: Code execution after original 6271 fix (bsc#898884) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bash-4.2-81.1 bash-debuginfo-4.2-81.1 bash-debugsource-4.2-81.1 bash-devel-4.2-81.1 bash-loadables-4.2-81.1 bash-loadables-debuginfo-4.2-81.1 libreadline6-6.2-81.1 libreadline6-debuginfo-6.2-81.1 readline-devel-6.2-81.1 - openSUSE Leap 42.1 (x86_64): bash-debuginfo-32bit-4.2-81.1 libreadline6-32bit-6.2-81.1 libreadline6-debuginfo-32bit-6.2-81.1 readline-devel-32bit-6.2-81.1 - openSUSE Leap 42.1 (noarch): bash-doc-4.2-81.1 bash-lang-4.2-81.1 readline-doc-6.2-81.1 References: https://www.suse.com/security/cve/CVE-2014-6277.html https://www.suse.com/security/cve/CVE-2014-6278.html https://www.suse.com/security/cve/CVE-2016-0634.html https://www.suse.com/security/cve/CVE-2016-7543.html https://bugzilla.suse.com/1000396 https://bugzilla.suse.com/1001299 https://bugzilla.suse.com/1001759 https://bugzilla.suse.com/898812 https://bugzilla.suse.com/898884

1 0

openSUSE-SU-2016:2960-1: Security update for libcares2
by opensuse-security＠opensuse.org 01 Dec '16

01 Dec '16

openSUSE Security Update: Security update for libcares2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2960-1 Rating: low References: #1007728 Cross-References: CVE-2016-5180 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcares2 fixes the following issues: - ares_create_query() single byte out of buffer write (CVE-2016-5180, boo#1007728) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libcares-devel-1.10.0-2.3.1 libcares2-1.10.0-2.3.1 libcares2-debuginfo-1.10.0-2.3.1 libcares2-debugsource-1.10.0-2.3.1 - openSUSE 13.2 (x86_64): libcares2-32bit-1.10.0-2.3.1 libcares2-debuginfo-32bit-1.10.0-2.3.1 References: https://www.suse.com/security/cve/CVE-2016-5180.html https://bugzilla.suse.com/1007728

1 0