December 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:3009-1: moderate: Security update for containerd, docker, runc
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for containerd, docker, runc ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3009-1 Rating: moderate References: #1004490 #1006368 #1007249 #1009961 #977394 #999582 Cross-References: CVE-2016-8867 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has 5 fixes is now available. Description: This update for containerd, docker, runc fixes the following issues: Security issues fixed: - CVE-2016-8867: Fix ambient capability usage in containers (bsc#1007249). Bugfixes: - boo#1006368: Fixed broken docker/containerd installation when installed by SuSE Studio in an appliance. - boo#1004490: Update docker to 1.12.2 - boo#977394: Fix go version to 1.5. - boo#999582: Change the internal mountpoint name to not use ":" as that character can be considered a special character by other tools. - Update docker to 1.12.3 * https://github.com/docker/docker/releases/tag/v1.12.3 This update changes the runc versioning scheme to prevent version downgrades (boo#1009961). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1400=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1400=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): containerd-0.2.4+gitr565_0366d7e-5.1 containerd-ctr-0.2.4+gitr565_0366d7e-5.1 containerd-ctr-debuginfo-0.2.4+gitr565_0366d7e-5.1 containerd-debuginfo-0.2.4+gitr565_0366d7e-5.1 containerd-debugsource-0.2.4+gitr565_0366d7e-5.1 docker-1.12.3-22.1 docker-debuginfo-1.12.3-22.1 docker-debugsource-1.12.3-22.1 docker-test-1.12.3-22.1 docker-test-debuginfo-1.12.3-22.1 runc-0.1.1+gitr2816_02f8fa7-5.1 runc-debuginfo-0.1.1+gitr2816_02f8fa7-5.1 runc-debugsource-0.1.1+gitr2816_02f8fa7-5.1 - openSUSE Leap 42.2 (noarch): containerd-test-0.2.4+gitr565_0366d7e-5.1 docker-bash-completion-1.12.3-22.1 docker-zsh-completion-1.12.3-22.1 runc-test-0.1.1+gitr2816_02f8fa7-5.1 - openSUSE Leap 42.1 (i586 x86_64): containerd-0.2.4+gitr565_0366d7e-7.1 containerd-ctr-0.2.4+gitr565_0366d7e-7.1 containerd-ctr-debuginfo-0.2.4+gitr565_0366d7e-7.1 containerd-debuginfo-0.2.4+gitr565_0366d7e-7.1 containerd-debugsource-0.2.4+gitr565_0366d7e-7.1 runc-0.1.1+gitr2816_02f8fa7-7.1 runc-debuginfo-0.1.1+gitr2816_02f8fa7-7.1 runc-debugsource-0.1.1+gitr2816_02f8fa7-7.1 - openSUSE Leap 42.1 (noarch): containerd-test-0.2.4+gitr565_0366d7e-7.1 docker-bash-completion-1.12.3-24.1 docker-zsh-completion-1.12.3-24.1 runc-test-0.1.1+gitr2816_02f8fa7-7.1 - openSUSE Leap 42.1 (x86_64): docker-1.12.3-24.1 docker-debuginfo-1.12.3-24.1 docker-debugsource-1.12.3-24.1 docker-test-1.12.3-24.1 docker-test-debuginfo-1.12.3-24.1 References: https://www.suse.com/security/cve/CVE-2016-8867.html https://bugzilla.suse.com/1004490 https://bugzilla.suse.com/1006368 https://bugzilla.suse.com/1007249 https://bugzilla.suse.com/1009961 https://bugzilla.suse.com/977394 https://bugzilla.suse.com/999582

1 0

openSUSE-SU-2016:3007-1: moderate: Security update for phpMyAdmin
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for phpMyAdmin ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3007-1 Rating: moderate References: #1012271 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to phpMyAdmin 4.4.15.9 fixes security issues and bugs. The following security issues were fixed: - Unsafe generation of $cfg['blowfish_secret'] (PMASA-2016-58) - phpMyAdmin's phpinfo functionality is removed (PMASA-2016-59) - AllowRoot and allow/deny rule bypass with specially-crafted username (PMASA-2016-60) - Username matching weaknesses with allow/deny rules (PMASA-2016-61) - Possible to bypass logout timeout (PMASA-2016-62) - Full path disclosure (FPD) weaknesses (PMASA-2016-63) - Multiple XSS weaknesses (PMASA-2016-64) - Multiple denial-of-service (DOS) vulnerabilities (PMASA-2016-65) - Possible to bypass white-list protection for URL redirection (PMASA-2016-66) - BBCode injection to login page (PMASA-2016-67) - Denial-of-service (DOS) vulnerability in table partitioning (PMASA-2016-68) - Multiple SQL injection vulnerabilities (PMASA-2016-69 ) - Incorrect serialized string parsing (PMASA-2016-70) - CSRF token not stripped from the URL (PMASA-2016-71) The following bugfix changes are included: - Fix for expanding in navigation pane - Reintroduced a simplified version of PmaAbsoluteUri directive (needed with reverse proxies) - Fix editing of ENUM/SET/DECIMAL field structures - Improvements to the parser Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1406=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1406=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1406=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): phpMyAdmin-4.4.15.9-28.1 - openSUSE Leap 42.1 (noarch): phpMyAdmin-4.4.15.9-28.1 - openSUSE 13.2 (noarch): phpMyAdmin-4.4.15.9-42.1 References: https://bugzilla.suse.com/1012271

1 0

openSUSE-SU-2016:3006-1: moderate: Security update for nodejs4
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for nodejs4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3006-1 Rating: moderate References: #1007728 #1009011 Cross-References: CVE-2016-5180 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for nodejs4 fixes the following issues: Security issues fixed: - CVE-2016-5180: c-ares: Fix for single-byte buffer overwrite (bsc#1007728). Bug fixes: - bsc#1009011: npm4 should provide versioned nodejs-npm and npm allowing nodejs-packaging to continue to function properly in Leap 42.2 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1403=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): nodejs4-4.6.1-3.1 nodejs4-debuginfo-4.6.1-3.1 nodejs4-debugsource-4.6.1-3.1 nodejs4-devel-4.6.1-3.1 npm4-4.6.1-3.1 - openSUSE Leap 42.2 (noarch): nodejs4-docs-4.6.1-3.1 References: https://www.suse.com/security/cve/CVE-2016-5180.html https://bugzilla.suse.com/1007728 https://bugzilla.suse.com/1009011

1 0

openSUSE-SU-2016:3005-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3005-1 Rating: moderate References: #1005070 #1005072 #1005076 #986566 #989980 #998677 Cross-References: CVE-2015-2304 CVE-2016-5418 CVE-2016-5844 CVE-2016-6250 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libarchive fixes several issues. These security issues were fixed: - CVE-2016-8687: Buffer overflow when printing a filename (bsc#1005070). - CVE-2016-8689: Heap overflow when reading corrupted 7Zip files (bsc#1005072). - CVE-2016-8688: Use after free because of incorrect calculation in next_line (bsc#1005076). - CVE-2016-5844: Integer overflow in the ISO parser in libarchive allowed remote attackers to cause a denial of service (application crash) via a crafted ISO file (bsc#986566). - CVE-2016-6250: Integer overflow in the ISO9660 writer in libarchive allowed remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow (bsc#989980). - CVE-2016-5418: The sandboxing code in libarchive mishandled hardlink archive entries of non-zero data size, which might allowed remote attackers to write to arbitrary files via a crafted archive file (bsc#998677). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1404=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bsdtar-3.1.2-16.1 bsdtar-debuginfo-3.1.2-16.1 libarchive-debugsource-3.1.2-16.1 libarchive-devel-3.1.2-16.1 libarchive13-3.1.2-16.1 libarchive13-debuginfo-3.1.2-16.1 - openSUSE Leap 42.1 (x86_64): libarchive13-32bit-3.1.2-16.1 libarchive13-debuginfo-32bit-3.1.2-16.1 References: https://www.suse.com/security/cve/CVE-2015-2304.html https://www.suse.com/security/cve/CVE-2016-5418.html https://www.suse.com/security/cve/CVE-2016-5844.html https://www.suse.com/security/cve/CVE-2016-6250.html https://www.suse.com/security/cve/CVE-2016-8687.html https://www.suse.com/security/cve/CVE-2016-8688.html https://www.suse.com/security/cve/CVE-2016-8689.html https://bugzilla.suse.com/1005070 https://bugzilla.suse.com/1005072 https://bugzilla.suse.com/1005076 https://bugzilla.suse.com/986566 https://bugzilla.suse.com/989980 https://bugzilla.suse.com/998677

1 0

openSUSE-SU-2016:3004-1: moderate: Security update for sudo
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for sudo ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3004-1 Rating: moderate References: #1007501 #1007766 #899252 #917806 #979531 Cross-References: CVE-2014-9680 CVE-2016-7032 CVE-2016-7076 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves three vulnerabilities and has two fixes is now available. Description: This update for sudo fixes the following security issues: - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501] - Fix unsafe handling of TZ environment variable. [CVE-2014-9680, bsc#917806] Additionally, these non-security fixes are included in the update: - Fix "ignoring time stamp from the future" message after each boot with !tty_tickets. [bsc#899252] - Enable support for SASL-based authentication. [bsc#979531] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1402=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): sudo-1.8.10p3-8.1 sudo-debuginfo-1.8.10p3-8.1 sudo-debugsource-1.8.10p3-8.1 sudo-devel-1.8.10p3-8.1 sudo-test-1.8.10p3-8.1 References: https://www.suse.com/security/cve/CVE-2014-9680.html https://www.suse.com/security/cve/CVE-2016-7032.html https://www.suse.com/security/cve/CVE-2016-7076.html https://bugzilla.suse.com/1007501 https://bugzilla.suse.com/1007766 https://bugzilla.suse.com/899252 https://bugzilla.suse.com/917806 https://bugzilla.suse.com/979531

1 0

openSUSE-SU-2016:3003-1: moderate: Security update for tar
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for tar ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3003-1 Rating: moderate References: #1007188 #913058 Cross-References: CVE-2016-6321 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for tar fixes the following issues: - Fix the POINTYFEATHER vulnerability - GNU tar archiver can be tricked into extracting files and directories in the given destination, regardless of the path name(s) specified on the command line [bsc#1007188] [CVE-2016-6321] - Fix Amanda integration issue (bsc#913058) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1401=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1401=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): tar-1.27.1-8.1 tar-backup-scripts-1.27.1-8.1 tar-debuginfo-1.27.1-8.1 tar-debugsource-1.27.1-8.1 tar-tests-1.27.1-8.1 tar-tests-debuginfo-1.27.1-8.1 - openSUSE Leap 42.2 (noarch): tar-lang-1.27.1-8.1 - openSUSE Leap 42.1 (i586 x86_64): tar-1.27.1-9.1 tar-backup-scripts-1.27.1-9.1 tar-debuginfo-1.27.1-9.1 tar-debugsource-1.27.1-9.1 tar-tests-1.27.1-9.1 tar-tests-debuginfo-1.27.1-9.1 - openSUSE Leap 42.1 (noarch): tar-lang-1.27.1-9.1 References: https://www.suse.com/security/cve/CVE-2016-6321.html https://bugzilla.suse.com/1007188 https://bugzilla.suse.com/913058

1 0

openSUSE-SU-2016:3002-1: moderate: Security update for libarchive
by opensuse-security＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:3002-1 Rating: moderate References: #1005070 #1005072 #1005076 #986566 #989980 #998677 Cross-References: CVE-2015-2304 CVE-2016-5418 CVE-2016-5844 CVE-2016-6250 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for libarchive fixes several issues. These security issues were fixed: - CVE-2016-8687: Buffer overflow when printing a filename (bsc#1005070). - CVE-2016-8689: Heap overflow when reading corrupted 7Zip files (bsc#1005072). - CVE-2016-8688: Use after free because of incorrect calculation in next_line (bsc#1005076). - CVE-2016-5844: Integer overflow in the ISO parser in libarchive allowed remote attackers to cause a denial of service (application crash) via a crafted ISO file (bsc#986566). - CVE-2016-6250: Integer overflow in the ISO9660 writer in libarchive allowed remote attackers to cause a denial of service (application crash) or execute arbitrary code via vectors related to verifying filename lengths when writing an ISO9660 archive, which trigger a buffer overflow (bsc#989980). - CVE-2016-5418: The sandboxing code in libarchive mishandled hardlink archive entries of non-zero data size, which might allowed remote attackers to write to arbitrary files via a crafted archive file (bsc#998677). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1405=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): bsdtar-3.1.2-16.1 bsdtar-debuginfo-3.1.2-16.1 libarchive-debugsource-3.1.2-16.1 libarchive-devel-3.1.2-16.1 libarchive13-3.1.2-16.1 libarchive13-debuginfo-3.1.2-16.1 - openSUSE Leap 42.2 (x86_64): libarchive13-32bit-3.1.2-16.1 libarchive13-debuginfo-32bit-3.1.2-16.1 References: https://www.suse.com/security/cve/CVE-2015-2304.html https://www.suse.com/security/cve/CVE-2016-5418.html https://www.suse.com/security/cve/CVE-2016-5844.html https://www.suse.com/security/cve/CVE-2016-6250.html https://www.suse.com/security/cve/CVE-2016-8687.html https://www.suse.com/security/cve/CVE-2016-8688.html https://www.suse.com/security/cve/CVE-2016-8689.html https://bugzilla.suse.com/1005070 https://bugzilla.suse.com/1005072 https://bugzilla.suse.com/1005076 https://bugzilla.suse.com/986566 https://bugzilla.suse.com/989980 https://bugzilla.suse.com/998677

1 0

openSUSE-RU-2016:3000-1: moderate: Recommended update for opera
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:3000-1 Rating: moderate References: #1012291 Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Opera was updated to 41.0.2353.69 to fix the following issues: - Moving elements in bookmarks bar crashes Opera An appdata.xml file was added to support the App store. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2016-1399=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-1399=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-41.0.2353.69-6.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-41.0.2353.69-43.1 References: https://bugzilla.suse.com/1012291

1 0

openSUSE-RU-2016:2999-1: moderate: Recommended update for gramps
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for gramps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2999-1 Rating: moderate References: #1011888 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for gramps fixes the following issues: - Update to version 4.2.4. (boo#1011888) - Fixes for the PHON, FAX, EMAIL and WWW Gedcom tags to support Gedcom v5.5.1. - Use more relative import. - Support for FTM and others Custom Gedcom Event Tags on import. - Fix '_deeprelationshippath' filter rule. - Narrativeweb: Corrected some dates in the tar archive. - Fix Gramps crashes when closed while exporting. - Some events are now shown in familymaps page. - Remove old debug bloc on place selection. - Add GUI and CLI config option to allow easy setting. - Chinese characters are now rendered properly in pdf reports. - Support for v5.5.1 OBJE/FORM/MEDI tag on embedded OBJE. - Sources on gedcom are sorted. - Change "class xxx(object)" to "class xxx". - Replaced "try: except:" with "with open". - "raise NotImplemented" was changed to "raise NotImplementedError()". - A new argument was added to IsEnclosedByRule. - Narrativeweb: place title must agree the references.place-auto configuration. - Improvements on CSV file format support. - Update of the Finnish holidays. - Some strings in tools and report dialogs will now translate. - Gedcom import improvements in media area to support v5.5.1 and FTM. - Fix trailing whitespace. - Support for Gedcom import of FTM .ged file containing _LINK tags. - Change pycairo-python3 to pycairo. - pycairo for python2 is now py2cairo. - Remove pango modules from bundle as pango no longer uses them. - Fix loss of spaces in text fields from FTM in the Gedcom import process. - Fix for Gedcom import of FTM file containing _PHOTO tags. - self.photo initializer implemented. - Fix error when attempting to select an "Available item" for the Book Report. - Fix for either valid or invalid FTM Gedcom. - Fix crash when importing a FTM file with OCCU record into Gedcom. - 'NoneType' object now has an attribute.('get_child_ref_list'). - Family Page maps are now functional in Narrative Web report. - String translated in geoplaces. - Descendant Report does now recognise auto. place title generation. - Translated text will be printed in the program. - Geography: Fix crash when attempting to print. (add parent to dialog) - GEDCOM accepts CR as a line terminator. - Corrected Numeric date format for cs_CZ locale. - Narrativeweb: consistent & complete display of place hierarchy labels. - Narratedweb: Fix surname listing for people with multiple partners. - Fix: In "Verify" people w/ death event w/o date are not thought dead. - While starting gramps, "tips of the day" screen pops up. - Fix: GEDCOM import in CLI mode with .ged file containing ANSEL encoding tries to pop up gui. - Fix merge conflict. - Use first matching name when generating place titles. - GEDCOM import with media files that have no path. - [Geography] Geoclose and mother handle. - Correct placing of the names if Gedcom ADDR record contains no street. - Tidy up place configuration options. - Use CSS to fade background colour in ValidatableMaskedEntry. - Fix crash on GEDCOM import with empty _AKA lines. - Add inclusive option to IsEnclosedBy rule. - Fix finding gender when saving/closing new person window with Alt-o. - Fix to allow deferred translation of place type. - Include all place types in place report. - Allow place selection both individually and by filter on textual report. - Expand tree in selectors automatically. - Fix Encloses gramplet to display correct place references. - Update for appdata stuff. - Fix UnboundLocalError on ODF doc backend. - Fix for wrong frame in Media Preview. - Fix signals. - Fix GEDCOM import PLAC:FORM in local mode. - Fix empty Place Alternate Names on import. - Fix "Merge unit" test for PlaceCheck. - Fix titles for GEDCOM import some Place Names &. - Fix loss of PLAC or ADDR attached Notes etc after GEDCOM import. - Gramps appearing in Gnome Software. - Fix broken GEDCOM import PLAC:FORM handling. - Fix duplicated entries while Place Alt Names. - Fix duplicate event IDs at multiple GEDCOM imports. - Fix place page in webreport. - Gallery tab of Source view displays .ods files. - Narrated Web report - Corrected individual sort order on the Surnames tab. - Specify required GtkSpell and GExiv2 version. - Fix Narrated web report link to thumbnails on certain pages. - Individual page sort order in the Narrated Web report has changed. - Gramps doens't report anymore that it can't find dictionaries. - Updated gramps.appdata.xml path. - Fix creation of the "graphic calendar report". - Fix "TypeError: 'tuple' object supports item assignment. - Fixed an unexpected error. - Fix for building narrated web site. - [NarrativeWeb report] Places index and Media index are now correctly sorted. - Fix error when trying to create narrative report. (residence event) - Fix filter set by default on selector, 'Show all' button. - Detailed Ancestors Report doesn't have ? anymore for locations when private data is excluded. - Fix age in the event family view column is wrong. - Fix crash when dragging multiple media items to clipboard. - Fix vCal Export File format. - Fix error for Complete Individual Report -- complete database - Narrated Web Site Report: places page is no longer sorted alphabetically - Narrative web: html elements emitted in different order - Narrative web: Fix error: "errno: 1, operation is not permitted" when creating archive. - Narrative Web report passes now. - Fix multiple lines for firstname on gramps XML file via import or export. - Fix scrolling in persons view after typing some letters. - Location on geography view can now convert string to float. - setup.py: Makes typeout more accurate. - Searching in people view when surnames are collapsed. - Fix error when changing database in new locations gramplets. - Fix error loading Participants add-on in French locale. - Restores setting for the stdout encoding to sys.getdefaultencoding() for Python3. - Fix comment about getting the right encoding for stdout. - Date format matches system. - Makes US English a special-case locale, where en_GB is the default for english based locales. - Enhance the Locations gramplet. - New "Encloses" gramplet to the display places that the active place encloses. - Individuals with incomplete names get updated when name completed. - Children gramplet in Family view gets updated when birth/death events are added to a child. - Non-image media objects appear in the main window gallery. - Pressing tab doesn't stop at element in gui places anymore. - Fix exception when double-clicking on a source in the citation gramplet. - Fix crash at "Find text in record" filter. - Fix vCard Export. - Fix "Remove Unused Objects Tool", so that it doesn't find notes used in the "To Do" gramplet anymore. - Enable Unicode selection. - Enable import of gedcom generated by RootsMagic custom place details ignoring PlaceName(). - Fix people sorted by surname view. - Fix crash when getting the complete PDF report about a person. (whole database) - Update for travis. - Only consider the values of LC_ALL, LANG, and LANGUAGE (in that order), when choosing the default locale. - Implement new Icelandic date and relationships handlers. - Fix Finnish translation in keywords of desktop entry. - Updated translations. - Add webcal.py.diff: add webcal.py from master. - Provide much nicer webcalendar navigation. - Clean space up and remove obsolete spaces at end of lines. - Uncheck the "Show all" checkbox of "Select Family" window when the filter is cleared. - Show name of user defined filter. - Fix ErrorDialog and GtkDialog as they were mapped without a transient parent. - Fix 'Find' when used in the Family selector. - Fix default selection in selectors. - Comment currently-unused bogus wiki URL pointers. - Fix counter for filtered entries and indentation on TreeBaseModel. - Fix faulty headline in start up screen. - Check that gramplet is in notebook before setting tab label. - Fix creation of focus change events. - Fix error TypeError: unorderable types: str() < NoneType()" at Interactivesearch. - Put tag selection list in alphabetical order. - Remove redundant code. - Fix delete error in undoable entry widget. - Fix deprecation warning. - Re-enable selection in MultiTreeView on a grab_broken event. - Add validation to gender field. - Fix unhandled AttributeError when db.get_tag_from_handle returns "None". - Fix ReferencedBySelectionProxy forgetting some referenced tags. - Remove encoding on stdout and stderr. - Handle citation objects in glocale.trans_objclass. - Enable import of Locality data in address. - Enable download of new or updated add-ons: - Don't check SSL certs when fetching addons. - Catch urlopen TypeError when context arg isn't supported. - Fix undefined variable error. - Fix ValueError "underlying buffer has been detached". - Fix LaTeX backend crashes. - Fix performance issue due to bad initialization and performance issue when selecting the events or places views. - Narrated Web Site Report: Fix html elements emitted in different order. - Disable creation of unused *_init.jpg in the narrated website. - Enable export of some media files to the NAVWEB report. - Add author to citations in the Narrative web report. - Fix TypeError: "unorderable types: EventRef() < EventRef()", when the events list and family list differ between two reports. - Change mtime to origin instead of destination. - Add missing thumbnails html file in the narrative web. - Narrativeweb: Place title based on current date not that of the event. - Webcal: make the month name clickable in the year overview page. - Enable translation of the word 'Narrative'. - Disable usage of an hardcoded string name on "Simple Descendants" textual report by an unknown spouse. - Enable translation of Father/mother's age attributes on reports. - Improve Russian date handler and unittests. - Use Mars month instead of Marzec on Polish locale (Date Editor). - Support for Retina and HiDPI Display, added 24px icons. - Fix verification tool with "Estimate missing or inexact dates" - Fix missing link in hourglass graph report. - Sort custom place types in editors. - Allow Easter calculation with python3. - Fix crash on Descendants-detailed report. - FanChartDescendants View should at least have 2 generations. - Allow hyphenated gramps-id in Graphviz reports. - Fix Complete Individual Report. - Fix broken wiki help links. - Set TextOption widget to expand vertically. - Adapt Unused Object Dialog. - Enable Short cut keys in the 'Change Event Types' dialog. - Update some "Tips of the day". - Fix Error when extracting place names. - Fix Pedigreeview crash when selecting Compact view. - Set "visable_window" in GtkEventBox to fix transparency. - Enable faster scrolling. - Cache database access for column values. - Cache do_get_path lookups. - Speed up load access on treeviews with no filters. - Set new LRU size of 1k (was 250). - Use cache in do_get_path from siblings. - Avoid using person-centric date matching for places. - Use place title as default name in GEDCOM import. - Ensure place names are not empty after upgrade. - Fix proxy to include all referenced place objects. - Remove copy button from family tree manager. - Add consistency for name fields on Person Editor. - Place.set_name(name) requires a PlaceName(). - Fixes and improvements on place selection. - Fix limit problems with existing selection in media reference editor. - Fix color on history. - Fix countries selector for holidays. - Fix missing markups into textual reports. - All sidebars with Types now show custom types in combo list. - Added Places to CSV import/export. - Some fixes on installer (setup.py). - Various improvements on gen.plug.utils. - Fix graph reports [in Greek locale]. - Add new date handler for Hungarian locale. - Update source URL path to github. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1396=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1396=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gramps-4.2.4-7.1 gramps-lang-4.2.4-7.1 - openSUSE Leap 42.1 (noarch): gramps-4.2.4-6.1 gramps-lang-4.2.4-6.1 References: https://bugzilla.suse.com/1011888

1 0

openSUSE-RU-2016:2998-1: important: Recommended update for fcoe-utils
by maintenance＠opensuse.org 05 Dec '16

05 Dec '16

openSUSE Recommended Update: Recommended update for fcoe-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2998-1 Rating: important References: #1006027 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fcoe-utils fixes a potential segmentation fault when running "fcoeadm -t" on systems where other fiber-channel storage devices are present. This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2016-1398=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): fcoe-utils-1.0.31-5.1 fcoe-utils-debuginfo-1.0.31-5.1 fcoe-utils-debugsource-1.0.31-5.1 References: https://bugzilla.suse.com/1006027

1 0