August 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2045-1: Recommended update for kmod
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for kmod ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2045-1 Rating: low References: #983754 #989788 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for kmod fixes libkmod to handle very long lines in /proc/modules. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-974=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): kmod-17-5.1 kmod-compat-17-5.1 kmod-debuginfo-17-5.1 kmod-debugsource-17-5.1 libkmod-devel-17-5.1 libkmod2-17-5.1 libkmod2-debuginfo-17-5.1 References: https://bugzilla.suse.com/983754 https://bugzilla.suse.com/989788

1 0

openSUSE-RU-2016:2044-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2044-1 Rating: moderate References: #951003 #959803 #975959 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Set MTU and LLADDR for DHCP if specified. (bsc#959803) - Wait for netroot until all iBFT interfaces are up. (bsc#951003) - Update iscsi module setup to test iscsi for flash directory before continuing (bsc#975959) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-965=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dracut-037-71.1 dracut-debuginfo-037-71.1 dracut-debugsource-037-71.1 dracut-fips-037-71.1 References: https://bugzilla.suse.com/951003 https://bugzilla.suse.com/959803 https://bugzilla.suse.com/975959

1 0

openSUSE-RU-2016:2043-1: moderate: Recommended update for booth
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for booth ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2043-1 Rating: moderate References: #968865 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for booth fixes the following issues: - Set the owner of /etc/booth and booth.conf.example to hacluster:haclient (bsc#968865) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-962=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): booth-0.2.0-37.1 booth-debuginfo-0.2.0-37.1 booth-debugsource-0.2.0-37.1 booth-test-0.2.0-37.1 References: https://bugzilla.suse.com/968865

1 0

openSUSE-SU-2016:2041-1: moderate: Security update for sqlite3
by opensuse-security＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Security Update: Security update for sqlite3 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2041-1 Rating: moderate References: #987394 Cross-References: CVE-2016-6153 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for sqlite3 fixes the following issues: The following security issue was fixed: - CVE-2016-6153: Fixed a tempdir selection vulnerability (bsc#987394) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-970=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libsqlite3-0-3.8.10.2-7.1 libsqlite3-0-debuginfo-3.8.10.2-7.1 sqlite3-3.8.10.2-7.1 sqlite3-debuginfo-3.8.10.2-7.1 sqlite3-debugsource-3.8.10.2-7.1 sqlite3-devel-3.8.10.2-7.1 - openSUSE Leap 42.1 (x86_64): libsqlite3-0-32bit-3.8.10.2-7.1 libsqlite3-0-debuginfo-32bit-3.8.10.2-7.1 - openSUSE Leap 42.1 (noarch): sqlite3-doc-3.8.10.2-7.1 References: https://www.suse.com/security/cve/CVE-2016-6153.html https://bugzilla.suse.com/987394

1 0

openSUSE-RU-2016:2040-1: Recommended update for permissions
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for permissions ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2040-1 Rating: low References: #975352 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for permissions fixes the following issues: - chage(1) only needs read rights for /etc/shadow, so change its default mode to setgid shadow instead of setuid root. (bsc#975352) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-967=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): permissions-2015.09.28.1626-11.2 permissions-debuginfo-2015.09.28.1626-11.2 permissions-debugsource-2015.09.28.1626-11.2 References: https://bugzilla.suse.com/975352

1 0

openSUSE-SU-2016:2036-1: important: Security update for libarchive
by opensuse-security＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Security Update: Security update for libarchive ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2036-1 Rating: important References: #984990 #985609 #985665 #985669 #985673 #985675 #985679 #985682 #985685 #985688 #985689 #985697 #985698 #985700 #985703 #985704 #985706 #985826 #985832 #985835 Cross-References: CVE-2015-8918 CVE-2015-8919 CVE-2015-8920 CVE-2015-8921 CVE-2015-8922 CVE-2015-8923 CVE-2015-8924 CVE-2015-8925 CVE-2015-8926 CVE-2015-8928 CVE-2015-8929 CVE-2015-8930 CVE-2015-8931 CVE-2015-8932 CVE-2015-8933 CVE-2015-8934 CVE-2016-4300 CVE-2016-4301 CVE-2016-4302 CVE-2016-4809 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 20 vulnerabilities is now available. Description: libarchive was updated to fix 20 security issues. These security issues were fixed: - CVE-2015-8918: Overlapping memcpy in CAB parser (bsc#985698). - CVE-2015-8919: Heap out of bounds read in LHA/LZH parser (bsc#985697). - CVE-2015-8920: Stack out of bounds read in ar parser (bsc#985675). - CVE-2015-8921: Global out of bounds read in mtree parser (bsc#985682). - CVE-2015-8922: Null pointer access in 7z parser (bsc#985685). - CVE-2015-8923: Unclear crashes in ZIP parser (bsc#985703). - CVE-2015-8924: Heap buffer read overflow in tar (bsc#985609). - CVE-2015-8925: Unclear invalid memory read in mtree parser (bsc#985706). - CVE-2015-8926: NULL pointer access in RAR parser (bsc#985704). - CVE-2015-8928: Heap out of bounds read in mtree parser (bsc#985679). - CVE-2015-8929: Memory leak in tar parser (bsc#985669). - CVE-2015-8930: Endless loop in ISO parser (bsc#985700). - CVE-2015-8931: Undefined behavior / signed integer overflow in mtree parser (bsc#985689). - CVE-2015-8932: Compress handler left shifting larger than int size (bsc#985665). - CVE-2015-8933: Undefined behavior / signed integer overflow in TAR parser (bsc#985688). - CVE-2015-8934: Out of bounds read in RAR (bsc#985673). - CVE-2016-4300: Heap buffer overflow vulnerability in the 7zip read_SubStreamsInfo (bsc#985832). - CVE-2016-4301: Stack buffer overflow in the mtree parse_device (bsc#985826). - CVE-2016-4302: Heap buffer overflow in the Rar decompression functionality (bsc#985835). - CVE-2016-4809: Memory allocate error with symbolic links in cpio archives (bsc#984990). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-969=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): bsdtar-3.1.2-13.2 bsdtar-debuginfo-3.1.2-13.2 libarchive-debugsource-3.1.2-13.2 libarchive-devel-3.1.2-13.2 libarchive13-3.1.2-13.2 libarchive13-debuginfo-3.1.2-13.2 - openSUSE Leap 42.1 (x86_64): libarchive13-32bit-3.1.2-13.2 libarchive13-debuginfo-32bit-3.1.2-13.2 References: https://www.suse.com/security/cve/CVE-2015-8918.html https://www.suse.com/security/cve/CVE-2015-8919.html https://www.suse.com/security/cve/CVE-2015-8920.html https://www.suse.com/security/cve/CVE-2015-8921.html https://www.suse.com/security/cve/CVE-2015-8922.html https://www.suse.com/security/cve/CVE-2015-8923.html https://www.suse.com/security/cve/CVE-2015-8924.html https://www.suse.com/security/cve/CVE-2015-8925.html https://www.suse.com/security/cve/CVE-2015-8926.html https://www.suse.com/security/cve/CVE-2015-8928.html https://www.suse.com/security/cve/CVE-2015-8929.html https://www.suse.com/security/cve/CVE-2015-8930.html https://www.suse.com/security/cve/CVE-2015-8931.html https://www.suse.com/security/cve/CVE-2015-8932.html https://www.suse.com/security/cve/CVE-2015-8933.html https://www.suse.com/security/cve/CVE-2015-8934.html https://www.suse.com/security/cve/CVE-2016-4300.html https://www.suse.com/security/cve/CVE-2016-4301.html https://www.suse.com/security/cve/CVE-2016-4302.html https://www.suse.com/security/cve/CVE-2016-4809.html https://bugzilla.suse.com/984990 https://bugzilla.suse.com/985609 https://bugzilla.suse.com/985665 https://bugzilla.suse.com/985669 https://bugzilla.suse.com/985673 https://bugzilla.suse.com/985675 https://bugzilla.suse.com/985679 https://bugzilla.suse.com/985682 https://bugzilla.suse.com/985685 https://bugzilla.suse.com/985688 https://bugzilla.suse.com/985689 https://bugzilla.suse.com/985697 https://bugzilla.suse.com/985698 https://bugzilla.suse.com/985700 https://bugzilla.suse.com/985703 https://bugzilla.suse.com/985704 https://bugzilla.suse.com/985706 https://bugzilla.suse.com/985826 https://bugzilla.suse.com/985832 https://bugzilla.suse.com/985835

1 0

openSUSE-SU-2016:2035-1: Security update for pcre2
by opensuse-security＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Security Update: Security update for pcre2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2035-1 Rating: low References: #971741 Cross-References: CVE-2016-3191 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for pcre2 fixes the following issues: - pcre2 10.22: * The POSIX wrapper function regcomp() did not used to support back references and subroutine calls if called with the REG_NOSUB option. It now does. * A new function, pcre2_code_copy(), is added, to make a copy of a compiled pattern. * Support for string callouts is added to pcre2grep. * Added the PCRE2_NO_JIT option to pcre2_match(). * The pcre2_get_error_message() function now returns with a negative error code if the error number it is given is unknown. * Several updates have been made to pcre2test and test scripts * Fix CVE-2016-3191: workspace overflow for (*ACCEPT) with deeply nested parentheses (boo#971741) - Update to new upstream release 10.21 * Improve JIT matching speed of patterns starting with + or *. * Use memchr() to find the first character in an unanchored match in 8-bit mode in the interpreter. This gives a significant speed improvement. * 10.20 broke the handling of [[:>:]] and [[:<:]] in that processing them could involve a buffer overflow if the following character was an opening parenthesis. * 10.20 also introduced a bug in processing this pattern: /((?x)(*:0))#(?'/, which was fixed. * A callout with a string argument containing an opening square bracket, for example /(?C$[$)(?<]/, was incorrectly processed and could provoke a buffer overflow. * A possessively repeated conditional group that could match an empty string, for example, /(?(R))*+/, was incorrectly compiled. * The Unicode tables have been updated to Unicode 8.0.0. * An empty comment (?#) in a pattern was incorrectly processed and could provoke a buffer overflow. * Fix infinite recursion in the JIT compiler when certain patterns /such as (?:|a|){100}x/ are analysed. * Some patterns with character classes involving [: and \\ were incorrectly compiled and could cause reading from uninitialized memory or an incorrect error diagnosis. Examples are: /[[:\\](?<[::]/ and /[[:\\](?'abc')[a:]. * A missing closing parenthesis for a callout with a string argument was not being diagnosed, possibly leading to a buffer overflow. * If (?R was followed by - or + incorrect behaviour happened instead of a diagnostic. * Fixed an issue when \p{Any} inside an xclass did not read the current character. * About 80 more fixes, which you can read about in the ChangeLog shipped with the libpcre2-8-0 package. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-966=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpcre2-16-0-10.22-7.1 libpcre2-16-0-debuginfo-10.22-7.1 libpcre2-32-0-10.22-7.1 libpcre2-32-0-debuginfo-10.22-7.1 libpcre2-8-0-10.22-7.1 libpcre2-8-0-debuginfo-10.22-7.1 libpcre2-posix1-10.22-7.1 libpcre2-posix1-debuginfo-10.22-7.1 pcre2-debugsource-10.22-7.1 pcre2-devel-10.22-7.1 pcre2-devel-static-10.22-7.1 pcre2-tools-10.22-7.1 pcre2-tools-debuginfo-10.22-7.1 - openSUSE Leap 42.1 (x86_64): libpcre2-16-0-32bit-10.22-7.1 libpcre2-16-0-debuginfo-32bit-10.22-7.1 libpcre2-32-0-32bit-10.22-7.1 libpcre2-32-0-debuginfo-32bit-10.22-7.1 libpcre2-8-0-32bit-10.22-7.1 libpcre2-8-0-debuginfo-32bit-10.22-7.1 libpcre2-posix1-32bit-10.22-7.1 libpcre2-posix1-debuginfo-32bit-10.22-7.1 - openSUSE Leap 42.1 (noarch): pcre2-doc-10.22-7.1 References: https://www.suse.com/security/cve/CVE-2016-3191.html https://bugzilla.suse.com/971741

1 0

openSUSE-RU-2016:2034-1: Recommended update for dbus-1
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for dbus-1 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2034-1 Rating: low References: #941352 #978477 #980928 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for dbus-1 fixes the following issues: - Correctly reset timeouts for pending file descriptors. (bsc#978477) - Increase listen() backlog of AF_UNIX sockets to SOMAXCONN. (bsc#980928) - Account for openSUSE:Leap in the conditional for choosing right local state directories (boo#941352) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-972=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dbus-1-1.8.16-7.1 dbus-1-debuginfo-1.8.16-7.1 dbus-1-debugsource-1.8.16-7.1 dbus-1-devel-1.8.16-7.1 dbus-1-x11-1.8.16-7.1 dbus-1-x11-debuginfo-1.8.16-7.1 dbus-1-x11-debugsource-1.8.16-7.1 libdbus-1-3-1.8.16-7.1 libdbus-1-3-debuginfo-1.8.16-7.1 - openSUSE Leap 42.1 (noarch): dbus-1-devel-doc-1.8.16-7.1 - openSUSE Leap 42.1 (x86_64): dbus-1-debuginfo-32bit-1.8.16-7.1 dbus-1-devel-32bit-1.8.16-7.1 libdbus-1-3-32bit-1.8.16-7.1 libdbus-1-3-debuginfo-32bit-1.8.16-7.1 References: https://bugzilla.suse.com/941352 https://bugzilla.suse.com/978477 https://bugzilla.suse.com/980928

1 0

openSUSE-RU-2016:2033-1: Recommended update for ipsec-tools
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for ipsec-tools ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2033-1 Rating: low References: #968926 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ipsec-tools fixes the package post installation script to create the /run/racoon directory, which will be later used when starting up racoon. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-968=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ipsec-tools-0.8.0-6.2 ipsec-tools-debuginfo-0.8.0-6.2 ipsec-tools-debugsource-0.8.0-6.2 References: https://bugzilla.suse.com/968926

1 0

openSUSE-RU-2016:2031-1: Recommended update for resource-agents
by maintenance＠opensuse.org 11 Aug '16

11 Aug '16

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2031-1 Rating: low References: #956739 #977193 #978680 #985486 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This update for resource-agents enables support for IPv6 in ldirectord. Two packages received enhancements related to IPv6 support: perl-Net-HTTP and perl-libwww-perl. perl-Net-INET6Glue was added to the distribution. Additionally, resource-agents received two bug fixes unrelated to the IPv6 feature: - exportfs: Add pseudo resource factor. (bsc#978680) - send_arp: Fix for infiniband, re-merge from upstream iputils arping. (bsc#985486) - Fixed one bugreference (bsc#956739) This update was imported from the SUSE:SLE-12:Update and SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-961=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldirectord-3.9.6+git.1442374860.7f3628a-13.1 monitoring-plugins-metadata-3.9.6+git.1442374860.7f3628a-13.1 resource-agents-3.9.6+git.1442374860.7f3628a-13.1 resource-agents-debuginfo-3.9.6+git.1442374860.7f3628a-13.1 resource-agents-debugsource-3.9.6+git.1442374860.7f3628a-13.1 - openSUSE Leap 42.1 (noarch): perl-Net-HTTP-6.06-5.1 perl-Net-INET6Glue-0.603-2.1 perl-libwww-perl-6.05-7.1 References: https://bugzilla.suse.com/956739 https://bugzilla.suse.com/977193 https://bugzilla.suse.com/978680 https://bugzilla.suse.com/985486

1 0