March 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:0815-1: moderate: Recommended update for systemd
by maintenance＠opensuse.org 18 Mar '16

18 Mar '16

openSUSE Recommended Update: Recommended update for systemd ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0815-1 Rating: moderate References: #927250 #942946 #948458 #948555 #949574 #954336 #954781 #955469 #955770 #958295 #958935 #958937 #961226 #961576 #962080 #964355 #965475 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 17 recommended fixes can now be installed. Description: This update for systemd provides the following fixes: - Set "maximum number of udev children reached" message's log level to debug. (bsc#958295) - Properly sum up journald's entry size counter. This allows systemd services to generate a core dump when they crash. (bsc#961226) - Rework messages during shutdown. (bsc#955469) - Move net_persistent_rule generator to SCRIPTS. (bsc#958935) - Revert "Skip persistent device link creation on multipath device paths". (bsc#942946) - Make sure all swap units are ordered before the swap target. (bsc#955770) - Add minimal support for 'set-property' command to bash-completion. (bsc#948458) - Properly handle locale at boot time. (bsc#927250) - Allow systemd-sysv-convert to do its job even if one of the sysvinit scripts is not found. (bsc#954336) - Do not return error when paths in ReadOnlyDirectories= and InaccessibleDirectories= directives are prefixed with "-" and don't exist. (bsc#954781) - Ensure tmp.mount is started automatically at boot time. (bsc#949574) - Don't ship fix.service anymore on 13.1, not needed by v210 (boo#965475) - Fix wrong substitution variable name in systemd-udev-root-symlink.service.in (boo#964355) - udev firmware loading support has been removed from 13.1 - systemd-firstboot is also shipped by SLE12 This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-360=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libgudev-1_0-0-210-89.1 libgudev-1_0-0-debuginfo-210-89.1 libgudev-1_0-devel-210-89.1 libudev-devel-210-89.1 libudev-mini-devel-210-89.1 libudev-mini1-210-89.1 libudev-mini1-debuginfo-210-89.1 libudev1-210-89.1 libudev1-debuginfo-210-89.1 nss-myhostname-210-89.1 nss-myhostname-debuginfo-210-89.1 systemd-210-89.1 systemd-debuginfo-210-89.1 systemd-debugsource-210-89.1 systemd-devel-210-89.1 systemd-journal-gateway-210-89.1 systemd-journal-gateway-debuginfo-210-89.1 systemd-logger-210-89.1 systemd-mini-210-89.1 systemd-mini-debuginfo-210-89.1 systemd-mini-debugsource-210-89.1 systemd-mini-devel-210-89.1 systemd-mini-sysvinit-210-89.1 systemd-sysvinit-210-89.1 typelib-1_0-GUdev-1_0-210-89.1 udev-210-89.1 udev-debuginfo-210-89.1 udev-mini-210-89.1 udev-mini-debuginfo-210-89.1 - openSUSE Leap 42.1 (x86_64): libgudev-1_0-0-32bit-210-89.1 libgudev-1_0-0-debuginfo-32bit-210-89.1 libudev1-32bit-210-89.1 libudev1-debuginfo-32bit-210-89.1 nss-myhostname-32bit-210-89.1 nss-myhostname-debuginfo-32bit-210-89.1 systemd-32bit-210-89.1 systemd-debuginfo-32bit-210-89.1 - openSUSE Leap 42.1 (noarch): systemd-bash-completion-210-89.1 References: https://bugzilla.suse.com/927250 https://bugzilla.suse.com/942946 https://bugzilla.suse.com/948458 https://bugzilla.suse.com/948555 https://bugzilla.suse.com/949574 https://bugzilla.suse.com/954336 https://bugzilla.suse.com/954781 https://bugzilla.suse.com/955469 https://bugzilla.suse.com/955770 https://bugzilla.suse.com/958295 https://bugzilla.suse.com/958935 https://bugzilla.suse.com/958937 https://bugzilla.suse.com/961226 https://bugzilla.suse.com/961576 https://bugzilla.suse.com/962080 https://bugzilla.suse.com/964355 https://bugzilla.suse.com/965475

1 0

openSUSE-SU-2016:0813-1: important: Security update for samba
by opensuse-security＠opensuse.org 18 Mar '16

18 Mar '16

openSUSE Security Update: Security update for samba ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0813-1 Rating: important References: #953382 #953972 #968222 #968223 Cross-References: CVE-2015-7560 CVE-2016-0771 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves two vulnerabilities and has two fixes is now available. Description: This update for samba fixes the following issues: Version update to 4.1.23. + Getting and setting Windows ACLs on symlinks can change permissions on link target; CVE-2015-7560; (bso#11648); (boo#968222). + Fix Out-of-bounds read in internal DNS server; CVE-2016-0771; (bso#11128); (bso#11686); (boo#968223). Also fixed: - Ensure samlogon fallback requests are rerouted after kerberos failure; (bnc#953382); (bnc#953972). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-359=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libdcerpc-atsvc-devel-4.1.23-31.1 libdcerpc-atsvc0-4.1.23-31.1 libdcerpc-atsvc0-debuginfo-4.1.23-31.1 libdcerpc-binding0-4.1.23-31.1 libdcerpc-binding0-debuginfo-4.1.23-31.1 libdcerpc-devel-4.1.23-31.1 libdcerpc-samr-devel-4.1.23-31.1 libdcerpc-samr0-4.1.23-31.1 libdcerpc-samr0-debuginfo-4.1.23-31.1 libdcerpc0-4.1.23-31.1 libdcerpc0-debuginfo-4.1.23-31.1 libgensec-devel-4.1.23-31.1 libgensec0-4.1.23-31.1 libgensec0-debuginfo-4.1.23-31.1 libndr-devel-4.1.23-31.1 libndr-krb5pac-devel-4.1.23-31.1 libndr-krb5pac0-4.1.23-31.1 libndr-krb5pac0-debuginfo-4.1.23-31.1 libndr-nbt-devel-4.1.23-31.1 libndr-nbt0-4.1.23-31.1 libndr-nbt0-debuginfo-4.1.23-31.1 libndr-standard-devel-4.1.23-31.1 libndr-standard0-4.1.23-31.1 libndr-standard0-debuginfo-4.1.23-31.1 libndr0-4.1.23-31.1 libndr0-debuginfo-4.1.23-31.1 libnetapi-devel-4.1.23-31.1 libnetapi0-4.1.23-31.1 libnetapi0-debuginfo-4.1.23-31.1 libpdb-devel-4.1.23-31.1 libpdb0-4.1.23-31.1 libpdb0-debuginfo-4.1.23-31.1 libregistry-devel-4.1.23-31.1 libregistry0-4.1.23-31.1 libregistry0-debuginfo-4.1.23-31.1 libsamba-credentials-devel-4.1.23-31.1 libsamba-credentials0-4.1.23-31.1 libsamba-credentials0-debuginfo-4.1.23-31.1 libsamba-hostconfig-devel-4.1.23-31.1 libsamba-hostconfig0-4.1.23-31.1 libsamba-hostconfig0-debuginfo-4.1.23-31.1 libsamba-policy-devel-4.1.23-31.1 libsamba-policy0-4.1.23-31.1 libsamba-policy0-debuginfo-4.1.23-31.1 libsamba-util-devel-4.1.23-31.1 libsamba-util0-4.1.23-31.1 libsamba-util0-debuginfo-4.1.23-31.1 libsamdb-devel-4.1.23-31.1 libsamdb0-4.1.23-31.1 libsamdb0-debuginfo-4.1.23-31.1 libsmbclient-devel-4.1.23-31.1 libsmbclient-raw-devel-4.1.23-31.1 libsmbclient-raw0-4.1.23-31.1 libsmbclient-raw0-debuginfo-4.1.23-31.1 libsmbclient0-4.1.23-31.1 libsmbclient0-debuginfo-4.1.23-31.1 libsmbconf-devel-4.1.23-31.1 libsmbconf0-4.1.23-31.1 libsmbconf0-debuginfo-4.1.23-31.1 libsmbldap-devel-4.1.23-31.1 libsmbldap0-4.1.23-31.1 libsmbldap0-debuginfo-4.1.23-31.1 libsmbsharemodes-devel-4.1.23-31.1 libsmbsharemodes0-4.1.23-31.1 libsmbsharemodes0-debuginfo-4.1.23-31.1 libtevent-util-devel-4.1.23-31.1 libtevent-util0-4.1.23-31.1 libtevent-util0-debuginfo-4.1.23-31.1 libwbclient-devel-4.1.23-31.1 libwbclient0-4.1.23-31.1 libwbclient0-debuginfo-4.1.23-31.1 samba-4.1.23-31.1 samba-client-4.1.23-31.1 samba-client-debuginfo-4.1.23-31.1 samba-core-devel-4.1.23-31.1 samba-debuginfo-4.1.23-31.1 samba-debugsource-4.1.23-31.1 samba-libs-4.1.23-31.1 samba-libs-debuginfo-4.1.23-31.1 samba-pidl-4.1.23-31.1 samba-python-4.1.23-31.1 samba-python-debuginfo-4.1.23-31.1 samba-test-4.1.23-31.1 samba-test-debuginfo-4.1.23-31.1 samba-test-devel-4.1.23-31.1 samba-winbind-4.1.23-31.1 samba-winbind-debuginfo-4.1.23-31.1 - openSUSE 13.2 (x86_64): libdcerpc-atsvc0-32bit-4.1.23-31.1 libdcerpc-atsvc0-debuginfo-32bit-4.1.23-31.1 libdcerpc-binding0-32bit-4.1.23-31.1 libdcerpc-binding0-debuginfo-32bit-4.1.23-31.1 libdcerpc-samr0-32bit-4.1.23-31.1 libdcerpc-samr0-debuginfo-32bit-4.1.23-31.1 libdcerpc0-32bit-4.1.23-31.1 libdcerpc0-debuginfo-32bit-4.1.23-31.1 libgensec0-32bit-4.1.23-31.1 libgensec0-debuginfo-32bit-4.1.23-31.1 libndr-krb5pac0-32bit-4.1.23-31.1 libndr-krb5pac0-debuginfo-32bit-4.1.23-31.1 libndr-nbt0-32bit-4.1.23-31.1 libndr-nbt0-debuginfo-32bit-4.1.23-31.1 libndr-standard0-32bit-4.1.23-31.1 libndr-standard0-debuginfo-32bit-4.1.23-31.1 libndr0-32bit-4.1.23-31.1 libndr0-debuginfo-32bit-4.1.23-31.1 libnetapi0-32bit-4.1.23-31.1 libnetapi0-debuginfo-32bit-4.1.23-31.1 libpdb0-32bit-4.1.23-31.1 libpdb0-debuginfo-32bit-4.1.23-31.1 libregistry0-32bit-4.1.23-31.1 libregistry0-debuginfo-32bit-4.1.23-31.1 libsamba-credentials0-32bit-4.1.23-31.1 libsamba-credentials0-debuginfo-32bit-4.1.23-31.1 libsamba-hostconfig0-32bit-4.1.23-31.1 libsamba-hostconfig0-debuginfo-32bit-4.1.23-31.1 libsamba-policy0-32bit-4.1.23-31.1 libsamba-policy0-debuginfo-32bit-4.1.23-31.1 libsamba-util0-32bit-4.1.23-31.1 libsamba-util0-debuginfo-32bit-4.1.23-31.1 libsamdb0-32bit-4.1.23-31.1 libsamdb0-debuginfo-32bit-4.1.23-31.1 libsmbclient-raw0-32bit-4.1.23-31.1 libsmbclient-raw0-debuginfo-32bit-4.1.23-31.1 libsmbclient0-32bit-4.1.23-31.1 libsmbclient0-debuginfo-32bit-4.1.23-31.1 libsmbconf0-32bit-4.1.23-31.1 libsmbconf0-debuginfo-32bit-4.1.23-31.1 libsmbldap0-32bit-4.1.23-31.1 libsmbldap0-debuginfo-32bit-4.1.23-31.1 libtevent-util0-32bit-4.1.23-31.1 libtevent-util0-debuginfo-32bit-4.1.23-31.1 libwbclient0-32bit-4.1.23-31.1 libwbclient0-debuginfo-32bit-4.1.23-31.1 samba-32bit-4.1.23-31.1 samba-client-32bit-4.1.23-31.1 samba-client-debuginfo-32bit-4.1.23-31.1 samba-debuginfo-32bit-4.1.23-31.1 samba-libs-32bit-4.1.23-31.1 samba-libs-debuginfo-32bit-4.1.23-31.1 samba-winbind-32bit-4.1.23-31.1 samba-winbind-debuginfo-32bit-4.1.23-31.1 - openSUSE 13.2 (noarch): samba-doc-4.1.23-31.1 References: https://www.suse.com/security/cve/CVE-2015-7560.html https://www.suse.com/security/cve/CVE-2016-0771.html https://bugzilla.suse.com/953382 https://bugzilla.suse.com/953972 https://bugzilla.suse.com/968222 https://bugzilla.suse.com/968223

1 0

openSUSE-RU-2016:0812-1: moderate: Recommended update for clementine
by maintenance＠opensuse.org 18 Mar '16

18 Mar '16

openSUSE Recommended Update: Recommended update for clementine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0812-1 Rating: moderate References: #904155 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for clementine fixes the following issues: - Added recommends for gstreamer-0_10-plugins--fluendo_mp3 to fix missing plugins message. See boo#904155 - check for 1230 din spec-file and do not use cmake-rpm-macro for 12.3 - Update to 1.2.3 * Fix compilation with GCC 4.9 * Fix poor search performance with sqlite 3.8. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-358=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-358=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): clementine-1.2.3-4.2 clementine-debuginfo-1.2.3-4.2 clementine-debugsource-1.2.3-4.2 - openSUSE 13.2 (i586 x86_64): clementine-1.2.3-3.3.2 clementine-debuginfo-1.2.3-3.3.2 clementine-debugsource-1.2.3-3.3.2 References: https://bugzilla.suse.com/904155

1 0

openSUSE-RU-2016:0811-1: moderate: Recommended update for i3
by maintenance＠opensuse.org 18 Mar '16

18 Mar '16

openSUSE Recommended Update: Recommended update for i3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0811-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update for i3 fixes the following issues: - Backport XKB fixes from 4.11: * Bugfixes: - Translate bindsym bindings upon ISO_Next_Group - Use libxkbcommon for translating keysyms, support all XKB groups - bindings: invert shift bit, don't just remove it - sort bindings, re-ordering once is not enough Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-361=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): i3-4.10.4-3.1 i3-debuginfo-4.10.4-3.1 i3-devel-4.10.4-3.1 References:

1 0

openSUSE-RU-2016:0809-1: Recommended update for clamav-database
by maintenance＠opensuse.org 17 Mar '16

17 Mar '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0809-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh March 14th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-357=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201603140002-62.1 References:

1 0

openSUSE-SU-2016:0803-1: important: Security update for cgit
by opensuse-security＠opensuse.org 17 Mar '16

17 Mar '16

openSUSE Security Update: Security update for cgit ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0803-1 Rating: important References: #971328 Cross-References: CVE-2016-2315 CVE-2016-2324 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for cgit fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code (CVE-2016-2315, CVE-2016-2324, bsc#971328). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-356=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-356=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cgit-0.12-9.1 cgit-debuginfo-0.12-9.1 cgit-debugsource-0.12-9.1 - openSUSE 13.2 (i586 x86_64): cgit-0.12-13.9.1 cgit-debuginfo-0.12-13.9.1 cgit-debugsource-0.12-13.9.1 References: https://www.suse.com/security/cve/CVE-2016-2315.html https://www.suse.com/security/cve/CVE-2016-2324.html https://bugzilla.suse.com/971328

1 0

openSUSE-SU-2016:0802-1: important: Security update for git
by opensuse-security＠opensuse.org 17 Mar '16

17 Mar '16

openSUSE Security Update: Security update for git ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0802-1 Rating: important References: #971328 Cross-References: CVE-2016-2315 CVE-2016-2324 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for git fixes a buffer overflow issue that had the potential to be abused for remote execution of arbitrary code (CVE-2016-2315, CVE-2016-2324, bsc#971328). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-355=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-355=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): git-2.6.2-3.1 git-arch-2.6.2-3.1 git-core-2.6.2-3.1 git-core-debuginfo-2.6.2-3.1 git-credential-gnome-keyring-2.6.2-3.1 git-credential-gnome-keyring-debuginfo-2.6.2-3.1 git-cvs-2.6.2-3.1 git-daemon-2.6.2-3.1 git-daemon-debuginfo-2.6.2-3.1 git-debugsource-2.6.2-3.1 git-email-2.6.2-3.1 git-gui-2.6.2-3.1 git-svn-2.6.2-3.1 git-svn-debuginfo-2.6.2-3.1 git-web-2.6.2-3.1 gitk-2.6.2-3.1 - openSUSE Leap 42.1 (noarch): git-doc-2.6.2-3.1 - openSUSE 13.2 (i586 x86_64): git-2.1.4-19.1 git-arch-2.1.4-19.1 git-core-2.1.4-19.1 git-core-debuginfo-2.1.4-19.1 git-cvs-2.1.4-19.1 git-daemon-2.1.4-19.1 git-daemon-debuginfo-2.1.4-19.1 git-debugsource-2.1.4-19.1 git-email-2.1.4-19.1 git-gui-2.1.4-19.1 git-svn-2.1.4-19.1 git-svn-debuginfo-2.1.4-19.1 git-web-2.1.4-19.1 gitk-2.1.4-19.1 - openSUSE 13.2 (noarch): git-doc-2.1.4-19.1 References: https://www.suse.com/security/cve/CVE-2016-2315.html https://www.suse.com/security/cve/CVE-2016-2324.html https://bugzilla.suse.com/971328

1 0

openSUSE-RU-2016:0801-1: important: Recommended update for grub2
by maintenance＠opensuse.org 17 Mar '16

17 Mar '16

openSUSE Recommended Update: Recommended update for grub2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0801-1 Rating: important References: #904647 #926795 #957383 #960776 #962182 #968721 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for grub2 fixes the following issues: - Add configuration option ($SUSE_CMDLINE_XENEFI) to set command line options for the EFI Xen loader. (bsc#957383) - Fix failure to boot s390x guests when the root file system is on btrfs and spans multiple disks. (bsc#960776) - Support booting installer media as PV DomU. (bsc#926795) - Backport upstream patches for HyperV Gen2 TSC timer calibration without RTC. (bsc#904647, bsc#962182) - Prevents "attempt to seek outside of the file" error when parsing xen ELF notes, preventing XEN guests to boot when using kernel-xen-3.12.53-60.30.1 This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-353=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): grub2-2.02~beta2-80.1 grub2-branding-upstream-2.02~beta2-80.1 grub2-debuginfo-2.02~beta2-80.1 grub2-i386-pc-2.02~beta2-80.1 - openSUSE Leap 42.1 (x86_64): grub2-x86_64-efi-2.02~beta2-80.1 grub2-x86_64-xen-2.02~beta2-80.1 - openSUSE Leap 42.1 (noarch): grub2-snapper-plugin-2.02~beta2-80.1 - openSUSE Leap 42.1 (i586): grub2-i386-efi-2.02~beta2-80.1 References: https://bugzilla.suse.com/904647 https://bugzilla.suse.com/926795 https://bugzilla.suse.com/957383 https://bugzilla.suse.com/960776 https://bugzilla.suse.com/962182 https://bugzilla.suse.com/968721

1 0

openSUSE-RU-2016:0800-1: moderate: Recommended update for yast2-network
by maintenance＠opensuse.org 17 Mar '16

17 Mar '16

openSUSE Recommended Update: Recommended update for yast2-network ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:0800-1 Rating: moderate References: #903190 #944349 #950902 #951330 #954412 #955217 #956012 #956605 #957377 #960703 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 10 recommended fixes can now be installed. Description: This update for yast2-network provides the following fixes: - Fixed AutoYaST support to use the correct network management system (Wicked or NetworkManager) instead of leaving both in a "half-started" state. (bsc#960703) - Fixed an internal error when aborting the configuration of a wireless interface. (bsc#950902) - Write udev rules for renamed devices for non-ssh/vnc AutoYaST installations. (bsc#956605) - Drop entry from /etc/hosts when deleting NIC configuration. (bsc#951330) - Fix validation of AutoYaST profiles. (bsc#954412) - When exporting AutoYaST profile, it contains DNS and route definitions even when these were configured using linuxrc. (bsc#956012, bsc#957377) - Do not raise internal error during AutoYaST installation with profile containing device renaming rule for not configured interfaces. (bsc#955217) - Do not set links down when running AutoYaST installation over vnc. (bsc#944349) - Renaming network devices during ssh/vnc installation is supported. (bsc#944349) - Recognize NICs with sub_class_id 07 as InfiniBand devices. (bsc#903190) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-354=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-network-3.1.140.3-6.1 yast2-network-devel-doc-3.1.140.3-6.1 References: https://bugzilla.suse.com/903190 https://bugzilla.suse.com/944349 https://bugzilla.suse.com/950902 https://bugzilla.suse.com/951330 https://bugzilla.suse.com/954412 https://bugzilla.suse.com/955217 https://bugzilla.suse.com/956012 https://bugzilla.suse.com/956605 https://bugzilla.suse.com/957377 https://bugzilla.suse.com/960703

1 0

openSUSE-SU-2016:0791-1: important: Security update for graphite2
by opensuse-security＠opensuse.org 16 Mar '16

16 Mar '16

openSUSE Security Update: Security update for graphite2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:0791-1 Rating: important References: #965803 #965806 #965807 #965810 Cross-References: CVE-2016-1521 CVE-2016-1522 CVE-2016-1523 CVE-2016-1526 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for graphite2 fixes the following issues: - CVE-2016-1521: The directrun function in directmachine.cpp in Libgraphite did not validate a certain skip operation, which allowed remote attackers to execute arbitrary code, obtain sensitive information, or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. - CVE-2016-1522: Code.cpp in Libgraphite did not consider recursive load calls during a size check, which allowed remote attackers to cause a denial of service (heap-based buffer overflow) or possibly execute arbitrary code via a crafted Graphite smart font. - CVE-2016-1523: The SillMap::readFace function in FeatureMap.cpp in Libgraphite mishandled a return value, which allowed remote attackers to cause a denial of service (missing initialization, NULL pointer dereference, and application crash) via a crafted Graphite smart font. - CVE-2016-1526: The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite incorrectly validated a size value, which allowed remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted Graphite smart font. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-349=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): graphite2-1.2.4-2.4.1 graphite2-debuginfo-1.2.4-2.4.1 graphite2-debugsource-1.2.4-2.4.1 graphite2-devel-1.2.4-2.4.1 libgraphite2-3-1.2.4-2.4.1 libgraphite2-3-debuginfo-1.2.4-2.4.1 - openSUSE 13.2 (x86_64): libgraphite2-3-32bit-1.2.4-2.4.1 libgraphite2-3-debuginfo-32bit-1.2.4-2.4.1 References: https://www.suse.com/security/cve/CVE-2016-1521.html https://www.suse.com/security/cve/CVE-2016-1522.html https://www.suse.com/security/cve/CVE-2016-1523.html https://www.suse.com/security/cve/CVE-2016-1526.html https://bugzilla.suse.com/965803 https://bugzilla.suse.com/965806 https://bugzilla.suse.com/965807 https://bugzilla.suse.com/965810

1 0