August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-SU-2016:2208-1: moderate: Security update for libgcrypt
by opensuse-security＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Security Update: Security update for libgcrypt ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2208-1 Rating: moderate References: #994157 Cross-References: CVE-2016-6313 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libgcrypt fixes the following issues: - RNG prediction vulnerability (boo#994157, CVE-2016-6313) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1042=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libgcrypt-cavs-1.6.1-8.19.1 libgcrypt-cavs-debuginfo-1.6.1-8.19.1 libgcrypt-debugsource-1.6.1-8.19.1 libgcrypt-devel-1.6.1-8.19.1 libgcrypt-devel-debuginfo-1.6.1-8.19.1 libgcrypt20-1.6.1-8.19.1 libgcrypt20-debuginfo-1.6.1-8.19.1 libgcrypt20-hmac-1.6.1-8.19.1 - openSUSE 13.2 (x86_64): libgcrypt-devel-32bit-1.6.1-8.19.1 libgcrypt-devel-debuginfo-32bit-1.6.1-8.19.1 libgcrypt20-32bit-1.6.1-8.19.1 libgcrypt20-debuginfo-32bit-1.6.1-8.19.1 libgcrypt20-hmac-32bit-1.6.1-8.19.1 References: https://www.suse.com/security/cve/CVE-2016-6313.html https://bugzilla.suse.com/994157

1 0

openSUSE-RU-2016:2207-1: Recommended update for clamav-database
by maintenance＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2207-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh August 22nd. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1040=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201608220003-146.1 References:

1 0

openSUSE-OU-2016:2206-1: Optional update for screenfetch
by maintenance＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Optional Update: Optional update for screenfetch ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2206-1 Rating: low References: #995916 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This optional update introduces the package screenfetch. screenFetch is a "Bash Screenshot Information Tool". This handy Bash script can be used to generate one of those nifty terminal theme information + ASCII distribution logos you see in everyone's screenshots nowadays. It will auto-detect your distribution and display an ASCII version of that distribution's logo and some valuable information to the right. There are options to specify no ascii art, colors, taking a screenshot upon displaying info, and even customizing the screenshot command! This script is very easy to add to and can be easily extended. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1038=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): screenfetch-3.7.0+git.20160826-2.1 References: https://bugzilla.suse.com/995916

1 0

openSUSE-OU-2016:2205-1: moderate: Recommended update for calcurse
by maintenance＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Optional Update: Recommended update for calcurse ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2205-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This optional update introduces calcurse to Backports SLE-12: Calcurse is a text-based personal organizer which helps keep track of events and everyday tasks. It has a calendar and a "todo" list, and puts your appointments in order. The user interface is configurable, and you can choose between different color schemes and layouts. All of the commands are documented within an online help system. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1039=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): calcurse-4.1.0-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): calcurse-lang-4.1.0-2.1 References:

1 0

openSUSE-SU-2016:2204-1: moderate: Security update for cracklib
by opensuse-security＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Security Update: Security update for cracklib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2204-1 Rating: moderate References: #992966 Cross-References: CVE-2016-6318 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for cracklib fixes the following issues: - Add patch to fix a buffer overflow in GECOS parser (bsc#992966 CVE-2016-6318) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1041=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): cracklib-2.9.0-7.1 cracklib-debuginfo-2.9.0-7.1 cracklib-debugsource-2.9.0-7.1 cracklib-devel-2.9.0-7.1 cracklib-dict-small-2.9.0-7.1 libcrack2-2.9.0-7.1 libcrack2-debuginfo-2.9.0-7.1 libpwquality-debugsource-1.2.3-5.1 libpwquality-devel-1.2.3-5.1 libpwquality-tools-1.2.3-5.1 libpwquality-tools-debuginfo-1.2.3-5.1 libpwquality1-1.2.3-5.1 libpwquality1-debuginfo-1.2.3-5.1 pam_pwquality-1.2.3-5.1 pam_pwquality-debuginfo-1.2.3-5.1 python-pwquality-1.2.3-5.1 python-pwquality-debuginfo-1.2.3-5.1 - openSUSE Leap 42.1 (x86_64): cracklib-devel-32bit-2.9.0-7.1 libcrack2-32bit-2.9.0-7.1 libcrack2-debuginfo-32bit-2.9.0-7.1 - openSUSE Leap 42.1 (noarch): libpwquality-lang-1.2.3-5.1 References: https://www.suse.com/security/cve/CVE-2016-6318.html https://bugzilla.suse.com/992966

1 0

openSUSE-SU-2016:2203-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2203-1 Rating: moderate References: #995034 Cross-References: CVE-2016-6905 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gd fixes the following issues: - Out-of-bounds read in function read_image_tga in gd_tga.c (CVE-2016-6905, boo#995034) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1037=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gd-2.1.0-7.14.1 gd-debuginfo-2.1.0-7.14.1 gd-debugsource-2.1.0-7.14.1 gd-devel-2.1.0-7.14.1 libgd3-2.1.0-7.14.1 libgd3-debuginfo-2.1.0-7.14.1 - openSUSE 13.2 (x86_64): libgd3-32bit-2.1.0-7.14.1 libgd3-debuginfo-32bit-2.1.0-7.14.1 References: https://www.suse.com/security/cve/CVE-2016-6905.html https://bugzilla.suse.com/995034

1 0

openSUSE-RU-2016:2201-1: Recommended update for libpcap
by maintenance＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Recommended Update: Recommended update for libpcap ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2201-1 Rating: low References: #874131 #992262 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for libpcap provides the following fixes: - Do not apply userspace filter until VLAN tag is reconstructed. (bsc#874131) - Use TPID value passed by kernel rather than wild-guess 802.1Q. (bsc#874131) - In "vlan" filter BPF code, check also for 802.1ad (0x88a8) TPID in addition to 802.1Q (0x8100) and non-standard 0x9100 Q-in-Q. (bsc#874131) - Add missing DLT_INFINIBAND to dlt_choices table. (bsc#992262, fate#319438) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1036=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpcap-debugsource-1.5.3-5.1 libpcap-devel-1.5.3-5.1 libpcap1-1.5.3-5.1 libpcap1-debuginfo-1.5.3-5.1 - openSUSE Leap 42.1 (x86_64): libpcap-devel-32bit-1.5.3-5.1 libpcap1-32bit-1.5.3-5.1 libpcap1-debuginfo-32bit-1.5.3-5.1 References: https://bugzilla.suse.com/874131 https://bugzilla.suse.com/992262

1 0

openSUSE-RU-2016:2200-1: moderate: Recommended update for nfs-utils
by maintenance＠opensuse.org 31 Aug '16

31 Aug '16

openSUSE Recommended Update: Recommended update for nfs-utils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2200-1 Rating: moderate References: #985845 #986108 #986395 #987035 #989323 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for nfs-utils fixes the following issues: - Fix mount issue due to comparison with uninitialized uuid. (bsc#987035) - Don't treat temporary name resolution failure as permanent. (bsc#986108, bsc#989323) - Use a public address for IPv6 callback. (bsc#986395) - Make the "mountpoint" export flag work with NFSv4. (bsc#985845) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1035=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): nfs-client-1.3.0-20.1 nfs-client-debuginfo-1.3.0-20.1 nfs-doc-1.3.0-20.1 nfs-kernel-server-1.3.0-20.1 nfs-kernel-server-debuginfo-1.3.0-20.1 nfs-utils-debugsource-1.3.0-20.1 References: https://bugzilla.suse.com/985845 https://bugzilla.suse.com/986108 https://bugzilla.suse.com/986395 https://bugzilla.suse.com/987035 https://bugzilla.suse.com/989323

1 0

openSUSE-SU-2016:2199-1: moderate: Security update for libqt4
by opensuse-security＠opensuse.org 30 Aug '16

30 Aug '16

openSUSE Security Update: Security update for libqt4 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2199-1 Rating: moderate References: #865241 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for libqt4 fixes the following issues: Various unsafe SSL ciphers have been disabled in the standard SSL classes. Also the RC4 based ciphers have been disabled. (bsc#865241) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1034=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libqt4-4.8.6-13.1 libqt4-debuginfo-4.8.6-13.1 libqt4-debugsource-4.8.6-13.1 libqt4-devel-4.8.6-13.1 libqt4-devel-debuginfo-4.8.6-13.1 libqt4-devel-doc-4.8.6-13.3 libqt4-devel-doc-debuginfo-4.8.6-13.3 libqt4-devel-doc-debugsource-4.8.6-13.3 libqt4-linguist-4.8.6-13.1 libqt4-linguist-debuginfo-4.8.6-13.1 libqt4-private-headers-devel-4.8.6-13.1 libqt4-qt3support-4.8.6-13.1 libqt4-qt3support-debuginfo-4.8.6-13.1 libqt4-sql-4.8.6-13.1 libqt4-sql-debuginfo-4.8.6-13.1 libqt4-sql-mysql-4.8.6-13.1 libqt4-sql-mysql-debuginfo-4.8.6-13.1 libqt4-sql-plugins-debugsource-4.8.6-13.1 libqt4-sql-postgresql-4.8.6-13.1 libqt4-sql-postgresql-debuginfo-4.8.6-13.1 libqt4-sql-sqlite-4.8.6-13.1 libqt4-sql-sqlite-debuginfo-4.8.6-13.1 libqt4-sql-unixODBC-4.8.6-13.1 libqt4-sql-unixODBC-debuginfo-4.8.6-13.1 libqt4-x11-4.8.6-13.1 libqt4-x11-debuginfo-4.8.6-13.1 qt4-x11-tools-4.8.6-13.3 qt4-x11-tools-debuginfo-4.8.6-13.3 - openSUSE Leap 42.1 (noarch): libqt4-devel-doc-data-4.8.6-13.3 - openSUSE Leap 42.1 (x86_64): libqt4-32bit-4.8.6-13.1 libqt4-debuginfo-32bit-4.8.6-13.1 libqt4-qt3support-32bit-4.8.6-13.1 libqt4-qt3support-debuginfo-32bit-4.8.6-13.1 libqt4-sql-32bit-4.8.6-13.1 libqt4-sql-debuginfo-32bit-4.8.6-13.1 libqt4-sql-mysql-32bit-4.8.6-13.1 libqt4-sql-mysql-debuginfo-32bit-4.8.6-13.1 libqt4-sql-postgresql-32bit-4.8.6-13.1 libqt4-sql-postgresql-debuginfo-32bit-4.8.6-13.1 libqt4-sql-sqlite-32bit-4.8.6-13.1 libqt4-sql-sqlite-debuginfo-32bit-4.8.6-13.1 libqt4-sql-unixODBC-32bit-4.8.6-13.1 libqt4-sql-unixODBC-debuginfo-32bit-4.8.6-13.1 libqt4-x11-32bit-4.8.6-13.1 libqt4-x11-debuginfo-32bit-4.8.6-13.1 References: https://bugzilla.suse.com/865241

1 0

openSUSE-RU-2016:2198-1: moderate: Recommended update for jemalloc
by maintenance＠opensuse.org 30 Aug '16

30 Aug '16

openSUSE Recommended Update: Recommended update for jemalloc ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2198-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This recommended update introduces the package jemalloc to SLE-12 Backports: Jemalloc is a general-purpose scalable concurrent malloc(3) implementation. This package provides a shell wrapper script to run programs using jemalloc. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1033=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): jemalloc-4.2.1-2.1 jemalloc-devel-4.2.1-2.1 jemalloc-devel-static-4.2.1-2.1 libjemalloc2-4.2.1-2.1 References:

1 0