May 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1399-1: moderate: Recommended update for libgcrypt
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1399-1 Rating: moderate References: #979629 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libgcrypt fixes the following issues: - make the -hmac package depend on the same version of the library (boo#979629) fips pattern Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-639=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.16.1 libgcrypt-cavs-debuginfo-1.6.1-8.16.1 libgcrypt-debugsource-1.6.1-8.16.1 libgcrypt-devel-1.6.1-8.16.1 libgcrypt-devel-debuginfo-1.6.1-8.16.1 libgcrypt20-1.6.1-8.16.1 libgcrypt20-debuginfo-1.6.1-8.16.1 libgcrypt20-hmac-1.6.1-8.16.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.16.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.16.1 libgcrypt20-32bit-1.6.1-8.16.1 libgcrypt20-debuginfo-32bit-1.6.1-8.16.1 libgcrypt20-hmac-32bit-1.6.1-8.16.1 References: https://bugzilla.suse.com/979629

1 0

openSUSE-RU-2016:1398-1: moderate: Recommended update for btrfsprogs
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for btrfsprogs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1398-1 Rating: moderate References: #888215 #912170 #956819 #958562 #966257 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update provides version 4.5.3 of btrfsprogs and fixes the following issues: - Add udev rules for dm devices (boo#912170 boo#888215) - Hide min/max macros clashing with gcc 6 (boo#966257) - Fix missing dependency on coreutils for initrd macros (boo#958562) - Call missing initrd macro at post / postun (boo#958562) - Fix mkfs failure on ppc64 (or with sectorsize > 4k) (boo#956819) For a detailed description of all changes, please refer to the changelog. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-636=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): btrfsprogs-4.5.3-13.1 btrfsprogs-debuginfo-4.5.3-13.1 btrfsprogs-debugsource-4.5.3-13.1 libbtrfs-devel-4.5.3-13.1 libbtrfs0-4.5.3-13.1 libbtrfs0-debuginfo-4.5.3-13.1 References: https://bugzilla.suse.com/888215 https://bugzilla.suse.com/912170 https://bugzilla.suse.com/956819 https://bugzilla.suse.com/958562 https://bugzilla.suse.com/966257

1 0

openSUSE-RU-2016:1397-1: moderate: Recommended update for caffeine
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for caffeine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1397-1 Rating: moderate References: #961715 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for caffeine fixes the following issues: - Add coding: utf-8 definition to /usr/bin/caffeine: python2 does need help in knowing how to read the source files (boo#961715). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-637=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): caffeine-2.7.2-5.1 References: https://bugzilla.suse.com/961715

1 0

openSUSE-RU-2016:1396-1: moderate: Recommended update for docker-distribution
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for docker-distribution ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1396-1 Rating: moderate References: #948097 #970507 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for docker-distribution fixes the following issues: - Updated version 2.1.1 to 2.4.0 + New S3 storage driver * The default s3 storage driver is now implemented on top of the official Amazon S3 SDK, boasting major performance and stability goodness. The previous storage is still available, but deprecated. + Garbage Collector * A garbage collector tool has been added to the registry. For more details see the garbage collector documentation. + Tagged Manifest Events * Manifest push and pull events will now include the tag which was used in the operation (if applicable). + Relative URLs * The registry can now be configured to return relative URLs in Location headers. + V1 Signature disabled * With the ongoing adoption of the schema 2 manifest format and deprecation of signatures, this option will improve pull performance by generating and returning a single libtrust signature. + Gotchas * The RADOS storage driver has been removed. The registry can still be used with Ceph as the storage backend using the swift driver in conjunction with the Swift API gateway. * The command line format has changed to support subcommands. To run a registry as before an additional subcommand - serve - is required. * The legacy S3 storage driver, based on adroll/goamz is now deprecated and will be removed in a future release. + Allow uppercase characters in hostnames. + Fix schema1 manifest etag and docker content digest header. + Add option to disable signatures. + To avoid any network use unless necessary, delay establishing authorization. + Extend authChallenger interface to remove type cast. + Enable proxying registries to downgrade fetched manifests to Schema 1. + Support the Image Manifest Version 2, Schema 2 manifest format. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-638=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): docker-distribution-debugsource-2.4.0-3.1 docker-distribution-registry-2.4.0-3.1 docker-distribution-registry-debuginfo-2.4.0-3.1 References: https://bugzilla.suse.com/948097 https://bugzilla.suse.com/970507

1 0

openSUSE-RU-2016:1395-1: moderate: Recommended update for lvm2
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for lvm2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1395-1 Rating: moderate References: #940298 #955529 #960044 #960744 #963427 #966183 #969310 #970439 #971334 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: This update for lvm2 fixes the following issues: - Fix clvmd.ocf and cmirrord to remove "-d" option for cmirrord. (bsc#971334) - Fix clvmd.ocf to add lvmconf --enable-cluster before starting daemon when locking_type is not 3 or use_lvmetad is 1. (bsc#970439) - Fix pvchange returning with exit code 5 if another volume group which is not related to the PVs is exported. (bsc#969310) - Omit some warning messages from pvcreate. (bsc#966183) - Change default locking_dir from "/var/lock/lvm" back to "/run/lvm/lock". (bsc#963427) - Improve pvcreate's error messages to be more informative. (bsc#960744) - Add 'Also=lvm2-lvmetad.socket' to '[Install]' section of lvm2-lvmetad.service to trigger removal of the former when the latter is disabled. (bsc#960044) - Remove verbose message when re-scanning devices. (bsc#955529) - Do not output error message inside retry loops to avoid noisy error message in case of remove failure because device is busy. (bsc#940298) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-640=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): device-mapper-1.02.97-67.1 device-mapper-debuginfo-1.02.97-67.1 device-mapper-devel-1.02.97-67.1 lvm2-2.02.120-67.1 lvm2-clvm-2.02.120-67.1 lvm2-clvm-debuginfo-2.02.120-67.1 lvm2-cmirrord-2.02.120-67.1 lvm2-cmirrord-debuginfo-2.02.120-67.1 lvm2-debuginfo-2.02.120-67.1 lvm2-debugsource-2.02.120-67.1 lvm2-devel-2.02.120-67.1 - openSUSE Leap 42.1 (x86_64): device-mapper-32bit-1.02.97-67.1 device-mapper-debuginfo-32bit-1.02.97-67.1 device-mapper-devel-32bit-1.02.97-67.1 References: https://bugzilla.suse.com/940298 https://bugzilla.suse.com/955529 https://bugzilla.suse.com/960044 https://bugzilla.suse.com/960744 https://bugzilla.suse.com/963427 https://bugzilla.suse.com/966183 https://bugzilla.suse.com/969310 https://bugzilla.suse.com/970439 https://bugzilla.suse.com/971334

1 0

openSUSE-RU-2016:1394-1: moderate: Recommended update for xf86-input-vmmouse
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for xf86-input-vmmouse ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1394-1 Rating: moderate References: #978785 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-input-vmmouse fixes the following issues: - Prevent crash when Uninit() is called due to a not successfully completed PreInit() (boo#978785). Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-635=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): xf86-input-vmmouse-13.0.0-11.3.1 xf86-input-vmmouse-debuginfo-13.0.0-11.3.1 xf86-input-vmmouse-debugsource-13.0.0-11.3.1 References: https://bugzilla.suse.com/978785

1 0

openSUSE-RU-2016:1393-1: Recommended update for fetchmail
by maintenance＠opensuse.org 25 May '16

25 May '16

openSUSE Recommended Update: Recommended update for fetchmail ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1393-1 Rating: low References: #979534 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for fetchmail fixes the following issues: - Made the helper script introduced in last change return exit status 5 on configuration errors instead of 1, which should make it a bit less confusing (boo#979534) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-633=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-633=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): fetchmail-6.3.26-17.1 fetchmail-debuginfo-6.3.26-17.1 fetchmail-debugsource-6.3.26-17.1 fetchmailconf-6.3.26-17.1 - openSUSE 13.2 (i586 x86_64): fetchmail-6.3.26-6.6.1 fetchmail-debuginfo-6.3.26-6.6.1 fetchmail-debugsource-6.3.26-6.6.1 fetchmailconf-6.3.26-6.6.1 References: https://bugzilla.suse.com/979534

1 0

openSUSE-OU-2016:1387-1: Optional update for iperf
by maintenance＠opensuse.org 23 May '16

23 May '16

openSUSE Optional Update: Optional update for iperf ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1387-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update provides iperf 3.1.2 for the SLE 12 backports project. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-632=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): iperf-3.1.2-2.1 iperf-devel-3.1.2-2.1 libiperf0-3.1.2-2.1 References:

1 0

openSUSE-RU-2016:1383-1: Recommended update for clamav-database
by maintenance＠opensuse.org 23 May '16

23 May '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1383-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh May 16th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-630=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201605160002-93.1 References:

1 0

openSUSE-SU-2016:1382-1: important: Security update for the Linux Kernel
by opensuse-security＠opensuse.org 23 May '16

23 May '16

openSUSE Security Update: Security update for the Linux Kernel ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1382-1 Rating: important References: #957988 #970892 #970911 #970948 #970955 #970956 #970958 #970970 #971124 #971360 #971628 #972174 #973378 #974418 #975868 Cross-References: CVE-2016-2185 CVE-2016-2186 CVE-2016-2188 CVE-2016-2847 CVE-2016-3136 CVE-2016-3137 CVE-2016-3138 CVE-2016-3140 CVE-2016-3156 CVE-2016-3689 CVE-2016-3951 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves 11 vulnerabilities and has four fixes is now available. Description: The openSUSE Leap 42.1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2016-2847: Limit the per-user amount of pages allocated in pipes (bsc#970948). - CVE-2016-3136: mct_u232: add sanity checking in probe (bnc#970955). - CVE-2016-2188: iowarrior: fix oops with malicious USB descriptors (bnc#970956). - CVE-2016-3138: cdc-acm: more sanity checking (bnc#970911). - CVE-2016-3137: cypress_m8: add endpoint sanity check (bnc#970970). - CVE-2016-3951: cdc_ncm: do not call usbnet_link_change from cdc_ncm_bind (bnc#974418). - CVE-2016-3140: digi_acceleport: do sanity checking for the number of ports (bnc#970892). - CVE-2016-2186: powermate: fix oops with malicious USB descriptors (bnc#970958). - CVE-2016-2185: usb_driver_claim_interface: add sanity checking (bnc#971124). - CVE-2016-3689: ims-pcu: sanity check against missing interfaces (bnc#971628). - CVE-2016-3156: ipv4: Do not do expensive useless work during inetdev destroy (bsc#971360). The following non-security bugs were fixed: - ALSA: timer: Call notifier in the same spinlock (bsc#973378). - ALSA: timer: Protect the whole snd_timer_close() with open race (bsc#973378). - ALSA: timer: Sync timer deletion at closing the system timer (bsc#973378). - ALSA: timer: Use mod_timer() for rearming the system timer (bsc#973378). - Backport arm64 patches from SLE12-SP1-ARM - Fix kABI additions for pipe: limit the per-user amount of pages allocated in pipes. - Revert "drm/radeon: call hpd_irq_event on resume" (boo#975868). - Update config files. Enable RTC_HCTOSYS, build I2C_XGENE_SLIMPRO as a module. - backends: guarantee one time reads of shared ring contents (bsc#957988). - ext4: fix races between buffered IO and collapse / insert range (bsc#972174). - ext4: fix races between page faults and hole punching (bsc#972174). - ext4: fix races of writeback with punch hole and zero range (bsc#972174). - ext4: move unlocked dio protection from ext4_alloc_file_blocks() (bsc#972174). - net: thunderx: Use napi_schedule_irqoff() - netback: do not use last request to determine minimum Tx credit (bsc#957988). Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-629=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i686 x86_64): kernel-debug-4.1.21-14.2 kernel-debug-base-4.1.21-14.2 kernel-debug-base-debuginfo-4.1.21-14.2 kernel-debug-debuginfo-4.1.21-14.2 kernel-debug-debugsource-4.1.21-14.2 kernel-debug-devel-4.1.21-14.2 kernel-debug-devel-debuginfo-4.1.21-14.2 kernel-ec2-4.1.21-14.2 kernel-ec2-base-4.1.21-14.2 kernel-ec2-base-debuginfo-4.1.21-14.2 kernel-ec2-debuginfo-4.1.21-14.2 kernel-ec2-debugsource-4.1.21-14.2 kernel-ec2-devel-4.1.21-14.2 kernel-pv-4.1.21-14.2 kernel-pv-base-4.1.21-14.2 kernel-pv-base-debuginfo-4.1.21-14.2 kernel-pv-debuginfo-4.1.21-14.2 kernel-pv-debugsource-4.1.21-14.2 kernel-pv-devel-4.1.21-14.2 kernel-vanilla-4.1.21-14.2 kernel-vanilla-debuginfo-4.1.21-14.2 kernel-vanilla-debugsource-4.1.21-14.2 kernel-vanilla-devel-4.1.21-14.2 kernel-xen-4.1.21-14.2 kernel-xen-base-4.1.21-14.2 kernel-xen-base-debuginfo-4.1.21-14.2 kernel-xen-debuginfo-4.1.21-14.2 kernel-xen-debugsource-4.1.21-14.2 kernel-xen-devel-4.1.21-14.2 - openSUSE Leap 42.1 (i586 x86_64): kernel-default-4.1.21-14.2 kernel-default-base-4.1.21-14.2 kernel-default-base-debuginfo-4.1.21-14.2 kernel-default-debuginfo-4.1.21-14.2 kernel-default-debugsource-4.1.21-14.2 kernel-default-devel-4.1.21-14.2 kernel-obs-build-4.1.21-14.4 kernel-obs-build-debugsource-4.1.21-14.4 kernel-obs-qa-4.1.21-14.2 kernel-obs-qa-xen-4.1.21-14.2 kernel-syms-4.1.21-14.2 - openSUSE Leap 42.1 (noarch): kernel-devel-4.1.21-14.2 kernel-docs-4.1.21-14.5 kernel-docs-html-4.1.21-14.5 kernel-docs-pdf-4.1.21-14.5 kernel-macros-4.1.21-14.2 kernel-source-4.1.21-14.2 kernel-source-vanilla-4.1.21-14.2 - openSUSE Leap 42.1 (i686): kernel-pae-4.1.21-14.2 kernel-pae-base-4.1.21-14.2 kernel-pae-base-debuginfo-4.1.21-14.2 kernel-pae-debuginfo-4.1.21-14.2 kernel-pae-debugsource-4.1.21-14.2 kernel-pae-devel-4.1.21-14.2 References: https://www.suse.com/security/cve/CVE-2016-2185.html https://www.suse.com/security/cve/CVE-2016-2186.html https://www.suse.com/security/cve/CVE-2016-2188.html https://www.suse.com/security/cve/CVE-2016-2847.html https://www.suse.com/security/cve/CVE-2016-3136.html https://www.suse.com/security/cve/CVE-2016-3137.html https://www.suse.com/security/cve/CVE-2016-3138.html https://www.suse.com/security/cve/CVE-2016-3140.html https://www.suse.com/security/cve/CVE-2016-3156.html https://www.suse.com/security/cve/CVE-2016-3689.html https://www.suse.com/security/cve/CVE-2016-3951.html https://bugzilla.suse.com/957988 https://bugzilla.suse.com/970892 https://bugzilla.suse.com/970911 https://bugzilla.suse.com/970948 https://bugzilla.suse.com/970955 https://bugzilla.suse.com/970956 https://bugzilla.suse.com/970958 https://bugzilla.suse.com/970970 https://bugzilla.suse.com/971124 https://bugzilla.suse.com/971360 https://bugzilla.suse.com/971628 https://bugzilla.suse.com/972174 https://bugzilla.suse.com/973378 https://bugzilla.suse.com/974418 https://bugzilla.suse.com/975868

1 0