August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:1925-1: moderate: Recommended update for shorewall
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for shorewall ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1925-1 Rating: moderate References: #989281 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update update for shorewall fixes the following issues: - Update shorewall to the 4.6.13.4 bugfix release (boo#989281) This includes the following upstream changes: - The DROP command was previously rejected in the mangle file. - Rules in which the SOURCE contained both an interface name and a MAC address would be rejected. - Optional interfaces were not enabled during 'start' and 'restart' unless there was at least one entry in the 'providers' file. - Use 'netstat' to print socket information when the 'ss' utility is not installed - Correctly delete default route in the main table if statistical load balancing was used in the providers file - No longer fail the 'reset' command if chain names were included - The TCP meta-connection is now supported by the Tinc macro and tunnel type Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-930=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): shorewall-4.6.13.4-3.1 shorewall-core-4.6.13.4-3.1 shorewall-docs-4.6.13.4-3.1 shorewall-init-4.6.13.4-3.1 shorewall-lite-4.6.13.4-3.1 shorewall6-4.6.13.4-3.1 shorewall6-lite-4.6.13.4-3.1 References: https://bugzilla.suse.com/989281

1 0

openSUSE-SU-2016:1924-1: moderate: Security update for libidn
by opensuse-security＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Security Update: Security update for libidn ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1924-1 Rating: moderate References: #990189 #990191 Cross-References: CVE-2015-8948 CVE-2016-6262 CVE-2016-6263 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This libidn update to version 1.33 fixes the following issues: Security issues fixed: - CVE-2015-8948, CVE-2016-6262: Fixed an out-of-bounds-read when reading one zero byte as input (bsc#990189). - CVE-2016-6263: Fixed stringprep_utf8_nfkc_normalize to reject invalid UTF-8 (bsc#boo#990191). Included bugfixes: - Fixed crash in idna_to_unicode_8z8z and idna_to_unicode_8zlz (introduced in 1.31). - API and ABI is backwards compatible with the previous version. - Update gpg keyring Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-925=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libidn-debugsource-1.33-3.6.1 libidn-devel-1.33-3.6.1 libidn-tools-1.33-3.6.1 libidn-tools-debuginfo-1.33-3.6.1 libidn11-1.33-3.6.1 libidn11-debuginfo-1.33-3.6.1 - openSUSE 13.2 (x86_64): libidn11-32bit-1.33-3.6.1 libidn11-debuginfo-32bit-1.33-3.6.1 References: https://www.suse.com/security/cve/CVE-2015-8948.html https://www.suse.com/security/cve/CVE-2016-6262.html https://www.suse.com/security/cve/CVE-2016-6263.html https://bugzilla.suse.com/990189 https://bugzilla.suse.com/990191

1 0

openSUSE-RU-2016:1923-1: Recommended update for automake
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for automake ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1923-1 Rating: low References: #986764 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for automake provides the following fixes: - Ensure ac_aux_dir is defined before usage. This fixes building of some packages (flatpak for instance). (bsc#986764) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-924=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): automake-1.13.4-8.1 References: https://bugzilla.suse.com/986764

1 0

openSUSE-SU-2016:1922-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:1922-1 Rating: moderate References: #986004 #986244 #986246 #986386 #986388 #986391 #986392 #986393 #988486 Cross-References: CVE-2015-8935 CVE-2016-5385 CVE-2016-5766 CVE-2016-5767 CVE-2016-5768 CVE-2016-5769 CVE-2016-5770 CVE-2016-5771 CVE-2016-5772 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 9 vulnerabilities is now available. Description: This update for php5 fixes the following issues: * It is possible to launch a web server with "php -S localhost:8080" It used to be possible to set an arbitrary $HTTP_PROXY environment variable for request handlers -- like CGI scripts -- by including a specially crafted HTTP header in the request (CVE-2016-5385). As a result, these server components would potentially direct all their outgoing HTTP traffic through a malicious proxy server. This patch fixes the issue: the updated php server ignores such HTTP headers and never sets $HTTP_PROXY for sub-processes. (bnc#988486) * There was multiple cases where a remote attacker could trigger a double free and, given specific PHP code using callbacks, trigger code execution vectors. (bnc#986246,bnc#986244,CVE-2016-5768,CVE-2016-5772) * It was possible to inject header or content information (XSS) when a user was using internet explorer as the browser. (bnc#986004, CVE-2015-8935) * In several cases it was possible for a integer overflow to trigger an excessive memory allocation (bnc#986392, bnc#986388, bnc#986386, bnc#986393, CVE-2016-5770, CVE-2016-5769, CVE-2016-5766, CVE-2016-5767) * It was possible for an attacker to abuse the garbage collector to free a target array. At this point an attacker could craft a fake zval object and exploit the PHP process by taking over the EIP/RIP. (bnc#986391, CVE-2016-5771) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-921=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-56.1 apache2-mod_php5-debuginfo-5.5.14-56.1 php5-5.5.14-56.1 php5-bcmath-5.5.14-56.1 php5-bcmath-debuginfo-5.5.14-56.1 php5-bz2-5.5.14-56.1 php5-bz2-debuginfo-5.5.14-56.1 php5-calendar-5.5.14-56.1 php5-calendar-debuginfo-5.5.14-56.1 php5-ctype-5.5.14-56.1 php5-ctype-debuginfo-5.5.14-56.1 php5-curl-5.5.14-56.1 php5-curl-debuginfo-5.5.14-56.1 php5-dba-5.5.14-56.1 php5-dba-debuginfo-5.5.14-56.1 php5-debuginfo-5.5.14-56.1 php5-debugsource-5.5.14-56.1 php5-devel-5.5.14-56.1 php5-dom-5.5.14-56.1 php5-dom-debuginfo-5.5.14-56.1 php5-enchant-5.5.14-56.1 php5-enchant-debuginfo-5.5.14-56.1 php5-exif-5.5.14-56.1 php5-exif-debuginfo-5.5.14-56.1 php5-fastcgi-5.5.14-56.1 php5-fastcgi-debuginfo-5.5.14-56.1 php5-fileinfo-5.5.14-56.1 php5-fileinfo-debuginfo-5.5.14-56.1 php5-firebird-5.5.14-56.1 php5-firebird-debuginfo-5.5.14-56.1 php5-fpm-5.5.14-56.1 php5-fpm-debuginfo-5.5.14-56.1 php5-ftp-5.5.14-56.1 php5-ftp-debuginfo-5.5.14-56.1 php5-gd-5.5.14-56.1 php5-gd-debuginfo-5.5.14-56.1 php5-gettext-5.5.14-56.1 php5-gettext-debuginfo-5.5.14-56.1 php5-gmp-5.5.14-56.1 php5-gmp-debuginfo-5.5.14-56.1 php5-iconv-5.5.14-56.1 php5-iconv-debuginfo-5.5.14-56.1 php5-imap-5.5.14-56.1 php5-imap-debuginfo-5.5.14-56.1 php5-intl-5.5.14-56.1 php5-intl-debuginfo-5.5.14-56.1 php5-json-5.5.14-56.1 php5-json-debuginfo-5.5.14-56.1 php5-ldap-5.5.14-56.1 php5-ldap-debuginfo-5.5.14-56.1 php5-mbstring-5.5.14-56.1 php5-mbstring-debuginfo-5.5.14-56.1 php5-mcrypt-5.5.14-56.1 php5-mcrypt-debuginfo-5.5.14-56.1 php5-mssql-5.5.14-56.1 php5-mssql-debuginfo-5.5.14-56.1 php5-mysql-5.5.14-56.1 php5-mysql-debuginfo-5.5.14-56.1 php5-odbc-5.5.14-56.1 php5-odbc-debuginfo-5.5.14-56.1 php5-opcache-5.5.14-56.1 php5-opcache-debuginfo-5.5.14-56.1 php5-openssl-5.5.14-56.1 php5-openssl-debuginfo-5.5.14-56.1 php5-pcntl-5.5.14-56.1 php5-pcntl-debuginfo-5.5.14-56.1 php5-pdo-5.5.14-56.1 php5-pdo-debuginfo-5.5.14-56.1 php5-pgsql-5.5.14-56.1 php5-pgsql-debuginfo-5.5.14-56.1 php5-phar-5.5.14-56.1 php5-phar-debuginfo-5.5.14-56.1 php5-posix-5.5.14-56.1 php5-posix-debuginfo-5.5.14-56.1 php5-pspell-5.5.14-56.1 php5-pspell-debuginfo-5.5.14-56.1 php5-readline-5.5.14-56.1 php5-readline-debuginfo-5.5.14-56.1 php5-shmop-5.5.14-56.1 php5-shmop-debuginfo-5.5.14-56.1 php5-snmp-5.5.14-56.1 php5-snmp-debuginfo-5.5.14-56.1 php5-soap-5.5.14-56.1 php5-soap-debuginfo-5.5.14-56.1 php5-sockets-5.5.14-56.1 php5-sockets-debuginfo-5.5.14-56.1 php5-sqlite-5.5.14-56.1 php5-sqlite-debuginfo-5.5.14-56.1 php5-suhosin-5.5.14-56.1 php5-suhosin-debuginfo-5.5.14-56.1 php5-sysvmsg-5.5.14-56.1 php5-sysvmsg-debuginfo-5.5.14-56.1 php5-sysvsem-5.5.14-56.1 php5-sysvsem-debuginfo-5.5.14-56.1 php5-sysvshm-5.5.14-56.1 php5-sysvshm-debuginfo-5.5.14-56.1 php5-tidy-5.5.14-56.1 php5-tidy-debuginfo-5.5.14-56.1 php5-tokenizer-5.5.14-56.1 php5-tokenizer-debuginfo-5.5.14-56.1 php5-wddx-5.5.14-56.1 php5-wddx-debuginfo-5.5.14-56.1 php5-xmlreader-5.5.14-56.1 php5-xmlreader-debuginfo-5.5.14-56.1 php5-xmlrpc-5.5.14-56.1 php5-xmlrpc-debuginfo-5.5.14-56.1 php5-xmlwriter-5.5.14-56.1 php5-xmlwriter-debuginfo-5.5.14-56.1 php5-xsl-5.5.14-56.1 php5-xsl-debuginfo-5.5.14-56.1 php5-zip-5.5.14-56.1 php5-zip-debuginfo-5.5.14-56.1 php5-zlib-5.5.14-56.1 php5-zlib-debuginfo-5.5.14-56.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-56.1 References: https://www.suse.com/security/cve/CVE-2015-8935.html https://www.suse.com/security/cve/CVE-2016-5385.html https://www.suse.com/security/cve/CVE-2016-5766.html https://www.suse.com/security/cve/CVE-2016-5767.html https://www.suse.com/security/cve/CVE-2016-5768.html https://www.suse.com/security/cve/CVE-2016-5769.html https://www.suse.com/security/cve/CVE-2016-5770.html https://www.suse.com/security/cve/CVE-2016-5771.html https://www.suse.com/security/cve/CVE-2016-5772.html https://bugzilla.suse.com/986004 https://bugzilla.suse.com/986244 https://bugzilla.suse.com/986246 https://bugzilla.suse.com/986386 https://bugzilla.suse.com/986388 https://bugzilla.suse.com/986391 https://bugzilla.suse.com/986392 https://bugzilla.suse.com/986393 https://bugzilla.suse.com/988486

1 0

openSUSE-RU-2016:1921-1: Recommended update for strace
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for strace ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1921-1 Rating: low References: #983282 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for strace provides the following fixes: - If the set of headers are unable to produce a valid list, printflags will try to pass NULL to tprints which crashes. Add a sanity check for this edge case. (bsc#983282) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-923=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): strace-4.10-3.1 strace-debuginfo-4.10-3.1 strace-debugsource-4.10-3.1 References: https://bugzilla.suse.com/983282

1 0

openSUSE-RU-2016:1920-1: moderate: Recommended update for ceph
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Recommended Update: Recommended update for ceph ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:1920-1 Rating: moderate References: #971768 #977738 #977769 #978844 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update contains ceph 0.94.7 and fixes the following issues: - osd/ReplicatedPG: do not proxy read *and* process op locally (boo#971768) - osd: scrub bogus results when missing a clone (boo#978844) The following tracked packaging changes are included: - install-deps.sh: backport jewel version to hammer (boo#977769) - hammer: tools: fix race condition in seq/rand bench (boo#977738) Also includes all upstream fixes and improvements in the 0.94.7 release. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-928=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (x86_64): ceph-0.94.7+git.1469119571.8e6f430-18.1 ceph-common-0.94.7+git.1469119571.8e6f430-18.1 ceph-common-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 ceph-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 ceph-debugsource-0.94.7+git.1469119571.8e6f430-18.1 ceph-devel-compat-0.94.7+git.1469119571.8e6f430-18.1 ceph-fuse-0.94.7+git.1469119571.8e6f430-18.1 ceph-fuse-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 ceph-libs-compat-0.94.7+git.1469119571.8e6f430-18.1 ceph-radosgw-0.94.7+git.1469119571.8e6f430-18.1 ceph-radosgw-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 ceph-test-0.94.7+git.1469119571.8e6f430-18.1 ceph-test-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 cephfs-java-0.94.7+git.1469119571.8e6f430-18.1 libcephfs1-0.94.7+git.1469119571.8e6f430-18.1 libcephfs1-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 libcephfs1-devel-0.94.7+git.1469119571.8e6f430-18.1 libcephfs_jni1-0.94.7+git.1469119571.8e6f430-18.1 libcephfs_jni1-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 libcephfs_jni1-devel-0.94.7+git.1469119571.8e6f430-18.1 librados2-0.94.7+git.1469119571.8e6f430-18.1 librados2-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 librados2-devel-0.94.7+git.1469119571.8e6f430-18.1 libradosstriper1-0.94.7+git.1469119571.8e6f430-18.1 libradosstriper1-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 libradosstriper1-devel-0.94.7+git.1469119571.8e6f430-18.1 librbd1-0.94.7+git.1469119571.8e6f430-18.1 librbd1-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 librbd1-devel-0.94.7+git.1469119571.8e6f430-18.1 python-ceph-compat-0.94.7+git.1469119571.8e6f430-18.1 python-cephfs-0.94.7+git.1469119571.8e6f430-18.1 python-rados-0.94.7+git.1469119571.8e6f430-18.1 python-rbd-0.94.7+git.1469119571.8e6f430-18.1 rbd-fuse-0.94.7+git.1469119571.8e6f430-18.1 rbd-fuse-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 rest-bench-0.94.7+git.1469119571.8e6f430-18.1 rest-bench-debuginfo-0.94.7+git.1469119571.8e6f430-18.1 References: https://bugzilla.suse.com/971768 https://bugzilla.suse.com/977738 https://bugzilla.suse.com/977769 https://bugzilla.suse.com/978844

1 0

openSUSE-OU-2016:1919-1: Add libbsd to openSUSE Leap.
by maintenance＠opensuse.org 01 Aug '16

01 Aug '16

openSUSE Optional Update: Add libbsd to openSUSE Leap. ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:1919-1 Rating: low References: #990355 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: This update make libbsd available on openSUSE Leap 42.1, a dependency for stress-ng and criu. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-920=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libbsd-ctor-static-0.8.3-2.1 libbsd-debugsource-0.8.3-2.1 libbsd-devel-0.8.3-2.1 libbsd0-0.8.3-2.1 libbsd0-debuginfo-0.8.3-2.1 References: https://bugzilla.suse.com/990355

1 0