March 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:0844-1: moderate: Security update for shotwell
by opensuse-security＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Security Update: Security update for shotwell ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0844-1 Rating: moderate References: #958382 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: Shotwell was updated to fix the following issues: * boo#958382: Shotwell did not perform TLS certificate verification when publishing photos to external services Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch 4813=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): shotwell-0.22.0+git.20160103-5.1 shotwell-debuginfo-0.22.0+git.20160103-5.1 shotwell-debugsource-0.22.0+git.20160103-5.1 - openSUSE Leap 42.1 (noarch): shotwell-lang-0.22.0+git.20160103-5.1 References: https://bugzilla.suse.com/958382

1 0

openSUSE-RU-2016:0843-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0843-1 Rating: moderate References: #961380 #962795 #965179 #967380 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for resource-agents provides the following fixes: - SAPDatabase: Add support for Oracle 12c. (bsc#967380) - exportfs: Don't increment fsid for single directory. (bsc#961380) - ldirectord: Fix unset failcount error. (bsc#962795) - nfsserver: Check if /var/lock/subsys exists before using it. (bsc#965179) - nfsserver: Prevent error messages on platforms without rpcuser. (bsc#965179) - nfsserver: Fix monitor for systemd. (bsc#965179) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-376=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldirectord-3.9.6+git.1442374860.7f3628a-6.1 monitoring-plugins-metadata-3.9.6+git.1442374860.7f3628a-6.1 resource-agents-3.9.6+git.1442374860.7f3628a-6.1 resource-agents-debuginfo-3.9.6+git.1442374860.7f3628a-6.1 resource-agents-debugsource-3.9.6+git.1442374860.7f3628a-6.1 References: https://bugzilla.suse.com/961380 https://bugzilla.suse.com/962795 https://bugzilla.suse.com/965179 https://bugzilla.suse.com/967380

1 0

openSUSE-RU-2016:0842-1: Recommended update for python-rtslib
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Recommended Update: Recommended update for python-rtslib ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0842-1 Rating: low References: #963348 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for python-rtslib provides the following enhancements: - Add support for xen-scsiback. (fate#315712) - Add support for nvme discs. (bsc#963348) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-374=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-rtslib-2.2-12.1 References: https://bugzilla.suse.com/963348

1 0

openSUSE-OU-2016:0841-1: Optional update for libwebp
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Optional Update: Optional update for libwebp ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:0841-1 Rating: low References: #965150 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update adds the libwebpdecoder1 library to SLE Software Development Kit 12 SP1. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-372=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libwebp-debugsource-0.4.3-7.1 libwebp-devel-0.4.3-7.1 libwebp-tools-0.4.3-7.1 libwebp-tools-debuginfo-0.4.3-7.1 libwebp5-0.4.3-7.1 libwebp5-debuginfo-0.4.3-7.1 libwebpdecoder1-0.4.3-7.1 libwebpdecoder1-debuginfo-0.4.3-7.1 libwebpdemux1-0.4.3-7.1 libwebpdemux1-debuginfo-0.4.3-7.1 libwebpmux1-0.4.3-7.1 libwebpmux1-debuginfo-0.4.3-7.1 - openSUSE Leap 42.1 (x86_64): libwebp5-32bit-0.4.3-7.1 libwebp5-debuginfo-32bit-0.4.3-7.1 libwebpdecoder1-32bit-0.4.3-7.1 libwebpdecoder1-debuginfo-32bit-0.4.3-7.1 libwebpdemux1-32bit-0.4.3-7.1 libwebpdemux1-debuginfo-32bit-0.4.3-7.1 libwebpmux1-32bit-0.4.3-7.1 libwebpmux1-debuginfo-32bit-0.4.3-7.1 References: https://bugzilla.suse.com/965150

1 0

openSUSE-RU-2016:0840-1: moderate: Recommended update for pdfchain
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Recommended Update: Recommended update for pdfchain ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0840-1 Rating: moderate References: #970530 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pdfchain fixes the following issues: - boo#970530: startup crash pdfchain was also updated to 0.4.4.2 containing various upstream bug fixes and improvements. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-371=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): pdfchain-0.4.4.2-9.1 pdfchain-debuginfo-0.4.4.2-9.1 pdfchain-debugsource-0.4.4.2-9.1 References: https://bugzilla.suse.com/970530

1 0

openSUSE-RU-2016:0838-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0838-1 Rating: moderate References: #959886 #960158 #963230 #964355 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for systemd fixes the following issues: - Prevent fill up of logs (boo#960158) - Make systemd.log_level=debug work as expected (boo#963230) - Remove WorkingDirectory parameter from emergency, rescue and console-shell.service (boo#959886) - Fix wrong substitution variable name in systemd-udev-root-symlink.service.in (boo#964355) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-375=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgudev-1_0-0-210.1456152170.f2b9ea6-25.34.1 libgudev-1_0-0-debuginfo-210.1456152170.f2b9ea6-25.34.1 libgudev-1_0-devel-210.1456152170.f2b9ea6-25.34.1 libudev-devel-210.1456152170.f2b9ea6-25.34.1 libudev-mini-devel-210.1456152170.f2b9ea6-25.34.1 libudev-mini1-210.1456152170.f2b9ea6-25.34.1 libudev-mini1-debuginfo-210.1456152170.f2b9ea6-25.34.1 libudev1-210.1456152170.f2b9ea6-25.34.1 libudev1-debuginfo-210.1456152170.f2b9ea6-25.34.1 nss-myhostname-210.1456152170.f2b9ea6-25.34.1 nss-myhostname-debuginfo-210.1456152170.f2b9ea6-25.34.1 systemd-210.1456152170.f2b9ea6-25.34.1 systemd-debuginfo-210.1456152170.f2b9ea6-25.34.1 systemd-debugsource-210.1456152170.f2b9ea6-25.34.1 systemd-devel-210.1456152170.f2b9ea6-25.34.1 systemd-journal-gateway-210.1456152170.f2b9ea6-25.34.1 systemd-journal-gateway-debuginfo-210.1456152170.f2b9ea6-25.34.1 systemd-logger-210.1456152170.f2b9ea6-25.34.1 systemd-mini-210.1456152170.f2b9ea6-25.34.1 systemd-mini-debuginfo-210.1456152170.f2b9ea6-25.34.1 systemd-mini-debugsource-210.1456152170.f2b9ea6-25.34.1 systemd-mini-devel-210.1456152170.f2b9ea6-25.34.1 systemd-mini-sysvinit-210.1456152170.f2b9ea6-25.34.1 systemd-sysvinit-210.1456152170.f2b9ea6-25.34.1 typelib-1_0-GUdev-1_0-210.1456152170.f2b9ea6-25.34.1 udev-210.1456152170.f2b9ea6-25.34.1 udev-debuginfo-210.1456152170.f2b9ea6-25.34.1 udev-mini-210.1456152170.f2b9ea6-25.34.1 udev-mini-debuginfo-210.1456152170.f2b9ea6-25.34.1 - openSUSE 13.2 (x86_64): libgudev-1_0-0-32bit-210.1456152170.f2b9ea6-25.34.1 libgudev-1_0-0-debuginfo-32bit-210.1456152170.f2b9ea6-25.34.1 libudev1-32bit-210.1456152170.f2b9ea6-25.34.1 libudev1-debuginfo-32bit-210.1456152170.f2b9ea6-25.34.1 nss-myhostname-32bit-210.1456152170.f2b9ea6-25.34.1 nss-myhostname-debuginfo-32bit-210.1456152170.f2b9ea6-25.34.1 systemd-32bit-210.1456152170.f2b9ea6-25.34.1 systemd-debuginfo-32bit-210.1456152170.f2b9ea6-25.34.1 - openSUSE 13.2 (noarch): systemd-bash-completion-210.1456152170.f2b9ea6-25.34.1 References: https://bugzilla.suse.com/959886 https://bugzilla.suse.com/960158 https://bugzilla.suse.com/963230 https://bugzilla.suse.com/964355

1 0

openSUSE-RU-2016:0836-1: moderate: Recommended update for machinery
by maintenance＠opensuse.org 21 Mar '16

21 Mar '16

openSUSE Recommended Update: Recommended update for machinery ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0836-1 Rating: moderate References: #968380 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides Machinery 1.18.0, which brings the following fixes and enhancements: - Make the machinery-helper exclusive to improve inspection performance significantly on all supported architectures. - Fix treatment of the rpm '(replaced)' flag (gh#SUSE/machinery#1897) - Fix repository recognition on older Debian systems - Inspection of unmanaged-files is now also using the faster machinery-helper when a remote user is used - Show all available information for unmanaged files in HTML view (gh#SUSE/machinery#1905) - Move the machinery documentation from man page to HTML format - Implement "--extract-metadata" option for the unmanaged-files inspection to retrieve the file meta (e.g. owner, group, size) data without extracting the files. - Fixed counting of files in unmanaged directories (empty directories now report zero files as one would expect) - Fix reset button in HTML view (gh#SUSE/machinery#1899) - Align config-files scope in HTML view (gh#SUSE/machinery#1814) - Allow closing file dialog (in WebUI) by pressing ESC - Support inspection of Ubuntu 14.04 systems - New '--ssh-identity-file' option to specify a SSH private key when inspecting a remote system - New '--ssh-port' option to specify an SSH port when inspecting a remote system This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-373=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): machinery-1.18.0-9.1 machinery-debuginfo-1.18.0-9.1 machinery-doc-1.18.0-9.1 References: https://bugzilla.suse.com/968380

1 0

openSUSE-SU-2016:0835-1: important: Security update for rubygem-actionpack-3_2
by opensuse-security＠opensuse.org 19 Mar '16

19 Mar '16

openSUSE Security Update: Security update for rubygem-actionpack-3_2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0835-1 Rating: important References: #968849 #968850 Cross-References: CVE-2016-2097 CVE-2016-2098 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for rubygem-actionpack-3_2 fixes the following issues: - CVE-2016-2097: rubygem-actionview: Possible Information Leak Vulnerability in Action View. (boo#968850) - CVE-2016-2098: rubygem-actionpack: Possible remote code execution vulnerability in Action Pack (boo#968849) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-369=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): rubygem-actionpack-3_2-3.2.17-3.10.1 rubygem-actionpack-3_2-doc-3.2.17-3.10.1 References: https://www.suse.com/security/cve/CVE-2016-2097.html https://www.suse.com/security/cve/CVE-2016-2098.html https://bugzilla.suse.com/968849 https://bugzilla.suse.com/968850

1 0

openSUSE-SU-2016:0834-1: important: Security update for bind
by opensuse-security＠opensuse.org 19 Mar '16

19 Mar '16

openSUSE Security Update: Security update for bind ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0834-1 Rating: important References: #970072 #970073 Cross-References: CVE-2016-1285 CVE-2016-1286 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for bind fixes the following issues: Fix two assertion failures that can lead to a remote denial of service attack: * CVE-2016-1285: An error when parsing signature records for DNAME can lead to named exiting due to an assertion failure. (bsc#970072) * CVE-2016-1286: An error when parsing signature records for DNAME records having specific properties can lead to named exiting due to an assertion failure in resolver.c or db.c. (bsc#970073) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-368=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): bind-9.9.6P1-2.19.1 bind-chrootenv-9.9.6P1-2.19.1 bind-debuginfo-9.9.6P1-2.19.1 bind-debugsource-9.9.6P1-2.19.1 bind-devel-9.9.6P1-2.19.1 bind-libs-9.9.6P1-2.19.1 bind-libs-debuginfo-9.9.6P1-2.19.1 bind-lwresd-9.9.6P1-2.19.1 bind-lwresd-debuginfo-9.9.6P1-2.19.1 bind-utils-9.9.6P1-2.19.1 bind-utils-debuginfo-9.9.6P1-2.19.1 - openSUSE 13.2 (x86_64): bind-libs-32bit-9.9.6P1-2.19.1 bind-libs-debuginfo-32bit-9.9.6P1-2.19.1 - openSUSE 13.2 (noarch): bind-doc-9.9.6P1-2.19.1 References: https://www.suse.com/security/cve/CVE-2016-1285.html https://www.suse.com/security/cve/CVE-2016-1286.html https://bugzilla.suse.com/970072 https://bugzilla.suse.com/970073

1 0

openSUSE-SU-2016:0833-1: important: Security update for bsh2
by opensuse-security＠opensuse.org 19 Mar '16

19 Mar '16

openSUSE Security Update: Security update for bsh2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0833-1 Rating: important References: #967593 Cross-References: CVE-2016-2510 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for bsh2 fixes the following issues: - Version update to 2.0b6 boo#967593 CVE-2016-2510 * Upstream developement moved to github * No obvious changelog apart from the above Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-370=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (noarch): bsh2-2.0.0.b6-27.3.1 bsh2-bsf-2.0.0.b6-27.3.1 bsh2-classgen-2.0.0.b6-27.3.1 bsh2-demo-2.0.0.b6-27.3.1 bsh2-javadoc-2.0.0.b6-27.3.1 bsh2-manual-2.0.0.b6-27.3.1 References: https://www.suse.com/security/cve/CVE-2016-2510.html https://bugzilla.suse.com/967593

1 0