September 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2365-1: moderate: Recommended update for lftp
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for lftp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2365-1 Rating: moderate References: #975913 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for lftp fixes the following issues: * boo#975913: lftp would not recover gracefully when system IPv6 support was disabled Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1115=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1115=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): lftp-4.6.4-6.1 lftp-debuginfo-4.6.4-6.1 lftp-debugsource-4.6.4-6.1 - openSUSE 13.2 (i586 x86_64): lftp-4.5.5-3.1 lftp-debuginfo-4.5.5-3.1 lftp-debugsource-4.5.5-3.1 References: https://bugzilla.suse.com/975913

1 0

openSUSE-RU-2016:2364-1: Recommended update for growpart
by maintenance＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Recommended Update: Recommended update for growpart ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2364-1 Rating: low References: #998378 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update provides growpart 0.29, which brings the following enhancements and fixes: - Fix use of partx with newer util-linux versions. - Fix some issues in error path reporting. - Capture output of 'partx --help' as older versions do not support that flag and send output to standard error. - Fix bug when growing partitions on disks greater than 2TB. - Support sfdisk 2.26 or newer, and support gpt partitions with sfdisk. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1114=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): growpart-0.29-7.1 References: https://bugzilla.suse.com/998378

1 0

openSUSE-SU-2016:2363-1: moderate: Security update for gd
by opensuse-security＠opensuse.org 24 Sep '16

24 Sep '16

openSUSE Security Update: Security update for gd ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2363-1 Rating: moderate References: #982176 #987577 #988032 #991436 #991622 #991710 #995034 Cross-References: CVE-2016-5116 CVE-2016-6128 CVE-2016-6132 CVE-2016-6161 CVE-2016-6207 CVE-2016-6214 CVE-2016-6905 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for gd fixes the following issues: * CVE-2016-6214: Buffer over-read issue when parsing crafted TGA file [bsc#991436] * CVE-2016-6132: read out-of-bands was found in the parsing of TGA files using libgd [bsc#987577] * CVE-2016-6128: Invalid color index not properly handled [bsc#991710] * CVE-2016-6207: Integer overflow error within _gdContributionsAlloc() [bsc#991622] * CVE-2016-6161: global out of bounds read when encoding gif from malformed input withgd2togif [bsc#988032] * CVE-2016-5116: avoid stack overflow (read) with large names [bsc#982176] * CVE-2016-6905: Out-of-bounds read in function read_image_tga in gd_tga.c [bsc#995034] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1108=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gd-2.1.0-10.1 gd-debuginfo-2.1.0-10.1 gd-debugsource-2.1.0-10.1 gd-devel-2.1.0-10.1 - openSUSE Leap 42.1 (x86_64): gd-32bit-2.1.0-10.1 gd-debuginfo-32bit-2.1.0-10.1 References: https://www.suse.com/security/cve/CVE-2016-5116.html https://www.suse.com/security/cve/CVE-2016-6128.html https://www.suse.com/security/cve/CVE-2016-6132.html https://www.suse.com/security/cve/CVE-2016-6161.html https://www.suse.com/security/cve/CVE-2016-6207.html https://www.suse.com/security/cve/CVE-2016-6214.html https://www.suse.com/security/cve/CVE-2016-6905.html https://bugzilla.suse.com/982176 https://bugzilla.suse.com/987577 https://bugzilla.suse.com/988032 https://bugzilla.suse.com/991436 https://bugzilla.suse.com/991622 https://bugzilla.suse.com/991710 https://bugzilla.suse.com/995034

1 0

openSUSE-OU-2016:2362-1: moderate: Recommended update for python-Cython, python-scipy, suitesparse
by maintenance＠opensuse.org 23 Sep '16

23 Sep '16

openSUSE Optional Update: Recommended update for python-Cython, python-scipy, suitesparse ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2362-1 Rating: moderate References: #746867 #751746 #775418 #883683 #942385 #963974 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 6 optional fixes can now be installed. Description: This optional update introduces the packages python-Cython, python-scipy, suitesparse for Backports:SLE-12: Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1107=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libamd-2_4_1-2.4.1-2.1 libbtf-1_2_1-1.2.1-2.1 libcamd-2_4_1-2.4.1-2.1 libccolamd-2_9_1-2.9.1-2.1 libcholmod-3_0_6-3.0.6-2.1 libcolamd-2_9_1-2.9.1-2.1 libcsparsever-3_1_4-3.1.4-2.1 libcxsparse-3_1_4-3.1.4-2.1 libklu-1_3_3-1.3.3-2.1 libldl-2_2_1-2.2.1-2.1 librbio-2_2_1-2.2.1-2.1 libspqr-2_0_2-2.0.2-2.1 libsuitesparseconfig-4_4_6-4.4.6-2.1 libumfpack-5_7_1-5.7.1-2.1 python-Cython-0.23.4-2.1 python-scipy-0.17.0-2.1 python-scipy-weave-0.17.0-2.1 suitesparse-devel-4.4.6-2.1 suitesparse-devel-static-4.4.6-2.1 References: https://bugzilla.suse.com/746867 https://bugzilla.suse.com/751746 https://bugzilla.suse.com/775418 https://bugzilla.suse.com/883683 https://bugzilla.suse.com/942385 https://bugzilla.suse.com/963974

1 0

openSUSE-OU-2016:2361-1: Add eatmydata to the SUSE Package Hub
by maintenance＠opensuse.org 23 Sep '16

23 Sep '16

openSUSE Optional Update: Add eatmydata to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2016:2361-1 Rating: low References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds eatmydata to the SUSE Package Hub. #libeatmydata is a small LD_PRELOAD library designed to (transparently) disable fsync (and friends, like open(O_SYNC)). This has two side-effects: making software that writes data safely to disk a lot quicker and making this software no longer crash safe. This package is useful for increasing the speed of test suites and continuous integration builds. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2016-1106=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): eatmydata-105-2.1 References:

1 0

openSUSE-SU-2016:2357-1: moderate: Security update for wpa_supplicant
by opensuse-security＠opensuse.org 23 Sep '16

23 Sep '16

openSUSE Security Update: Security update for wpa_supplicant ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2357-1 Rating: moderate References: #930077 #930078 #930079 #937419 #952254 Cross-References: CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-5310 CVE-2015-8041 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for wpa_supplicant fixes the following issues: - CVE-2015-4141: WPS UPnP vulnerability with HTTP chunked transfer encoding. (bnc#930077) - CVE-2015-4142: Integer underflow in AP mode WMM Action frame processing. (bnc#930078) - CVE-2015-4143: EAP-pwd missing payload length validation. (bnc#930079) - CVE-2015-5310: Ignore Key Data in WNM Sleep Mode Response frame if no PMF in use. (bsc#952254) - CVE-2015-8041: Fix payload length validation in NDEF record parser. (bsc#937419) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1104=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wpa_supplicant-2.2-8.1 wpa_supplicant-debuginfo-2.2-8.1 wpa_supplicant-debugsource-2.2-8.1 wpa_supplicant-gui-2.2-8.1 wpa_supplicant-gui-debuginfo-2.2-8.1 References: https://www.suse.com/security/cve/CVE-2015-4141.html https://www.suse.com/security/cve/CVE-2015-4142.html https://www.suse.com/security/cve/CVE-2015-4143.html https://www.suse.com/security/cve/CVE-2015-5310.html https://www.suse.com/security/cve/CVE-2015-8041.html https://bugzilla.suse.com/930077 https://bugzilla.suse.com/930078 https://bugzilla.suse.com/930079 https://bugzilla.suse.com/937419 https://bugzilla.suse.com/952254

1 0

openSUSE-SU-2016:2354-1: moderate: Security update for pdns
by opensuse-security＠opensuse.org 23 Sep '16

23 Sep '16

openSUSE Security Update: Security update for pdns ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2354-1 Rating: moderate References: #998159 Cross-References: CVE-2016-5426 CVE-2016-5427 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for pdns fixes the following issues: - CVE-2016-5426, CVE-2016-5427: Fix case where crafted queries can cause unexpected backend load. (boo#998159) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1103=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1103=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): pdns-3.4.6-6.2 pdns-backend-ldap-3.4.6-6.2 pdns-backend-ldap-debuginfo-3.4.6-6.2 pdns-backend-lua-3.4.6-6.2 pdns-backend-lua-debuginfo-3.4.6-6.2 pdns-backend-mydns-3.4.6-6.2 pdns-backend-mydns-debuginfo-3.4.6-6.2 pdns-backend-mysql-3.4.6-6.2 pdns-backend-mysql-debuginfo-3.4.6-6.2 pdns-backend-postgresql-3.4.6-6.2 pdns-backend-postgresql-debuginfo-3.4.6-6.2 pdns-backend-sqlite3-3.4.6-6.2 pdns-backend-sqlite3-debuginfo-3.4.6-6.2 pdns-debuginfo-3.4.6-6.2 pdns-debugsource-3.4.6-6.2 - openSUSE 13.2 (i586 x86_64): pdns-3.3.1-2.9.1 pdns-backend-ldap-3.3.1-2.9.1 pdns-backend-ldap-debuginfo-3.3.1-2.9.1 pdns-backend-lua-3.3.1-2.9.1 pdns-backend-lua-debuginfo-3.3.1-2.9.1 pdns-backend-mydns-3.3.1-2.9.1 pdns-backend-mydns-debuginfo-3.3.1-2.9.1 pdns-backend-mysql-3.3.1-2.9.1 pdns-backend-mysql-debuginfo-3.3.1-2.9.1 pdns-backend-postgresql-3.3.1-2.9.1 pdns-backend-postgresql-debuginfo-3.3.1-2.9.1 pdns-backend-sqlite3-3.3.1-2.9.1 pdns-backend-sqlite3-debuginfo-3.3.1-2.9.1 pdns-debuginfo-3.3.1-2.9.1 pdns-debugsource-3.3.1-2.9.1 References: https://www.suse.com/security/cve/CVE-2016-5426.html https://www.suse.com/security/cve/CVE-2016-5427.html https://bugzilla.suse.com/998159

1 0

openSUSE-SU-2016:2349-1: moderate: Security update for opera
by opensuse-security＠opensuse.org 22 Sep '16

22 Sep '16

openSUSE Security Update: Security update for opera ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2349-1 Rating: moderate References: #996648 Affected Products: openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update to Opera 40.0.2308.54 contains feature updates and bug fixes. - runs Chromium 53.0.2785.101 (bsc#996648) - built-in VPN service - Various video playback improvements - Support for DHE-based TLS ciphers has been removed Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2016-1101=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1:NonFree (x86_64): opera-40.0.2308.54-28.1 References: https://bugzilla.suse.com/996648

1 0

openSUSE-RU-2016:2344-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 21 Sep '16

21 Sep '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2344-1 Rating: moderate References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - database refresh 2016-09-19 This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201609190002-158.1 References:

1 0

openSUSE-RU-2016:2342-1: moderate: Recommended update for Mesa
by maintenance＠opensuse.org 20 Sep '16

20 Sep '16

openSUSE Recommended Update: Recommended update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2342-1 Rating: moderate References: #985650 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for Mesa fixes the following issues: - Initialize RSxxx chipsets correctly (boo#985650) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1098=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): Mesa-11.0.8-151.1 Mesa-debuginfo-11.0.8-151.1 Mesa-debugsource-11.0.8-151.1 Mesa-devel-11.0.8-151.1 Mesa-dri-devel-11.0.8-151.1 Mesa-libEGL-devel-11.0.8-151.1 Mesa-libEGL1-11.0.8-151.1 Mesa-libEGL1-debuginfo-11.0.8-151.1 Mesa-libGL-devel-11.0.8-151.1 Mesa-libGL1-11.0.8-151.1 Mesa-libGL1-debuginfo-11.0.8-151.1 Mesa-libGLESv1_CM-devel-11.0.8-151.1 Mesa-libGLESv1_CM1-11.0.8-151.1 Mesa-libGLESv1_CM1-debuginfo-11.0.8-151.1 Mesa-libGLESv2-2-11.0.8-151.1 Mesa-libGLESv2-2-debuginfo-11.0.8-151.1 Mesa-libGLESv2-devel-11.0.8-151.1 Mesa-libGLESv3-devel-11.0.8-151.1 Mesa-libd3d-11.0.8-151.1 Mesa-libd3d-debuginfo-11.0.8-151.1 Mesa-libd3d-devel-11.0.8-151.1 Mesa-libglapi-devel-11.0.8-151.1 Mesa-libglapi0-11.0.8-151.1 Mesa-libglapi0-debuginfo-11.0.8-151.1 libOSMesa-devel-11.0.8-151.1 libOSMesa9-11.0.8-151.1 libOSMesa9-debuginfo-11.0.8-151.1 libXvMC_nouveau-11.0.8-151.1 libXvMC_nouveau-debuginfo-11.0.8-151.1 libXvMC_r600-11.0.8-151.1 libgbm-devel-11.0.8-151.1 libgbm1-11.0.8-151.1 libgbm1-debuginfo-11.0.8-151.1 libvdpau_nouveau-11.0.8-151.1 libvdpau_nouveau-debuginfo-11.0.8-151.1 libvdpau_r300-11.0.8-151.1 libvdpau_r600-11.0.8-151.1 libvdpau_radeonsi-11.0.8-151.1 libwayland-egl-devel-11.0.8-151.1 libwayland-egl1-11.0.8-151.1 libwayland-egl1-debuginfo-11.0.8-151.1 libxatracker-devel-1.0.0-151.1 libxatracker2-1.0.0-151.1 libxatracker2-debuginfo-1.0.0-151.1 - openSUSE Leap 42.1 (x86_64): Mesa-32bit-11.0.8-151.1 Mesa-debuginfo-32bit-11.0.8-151.1 Mesa-libEGL-devel-32bit-11.0.8-151.1 Mesa-libEGL1-32bit-11.0.8-151.1 Mesa-libEGL1-debuginfo-32bit-11.0.8-151.1 Mesa-libGL-devel-32bit-11.0.8-151.1 Mesa-libGL1-32bit-11.0.8-151.1 Mesa-libGL1-debuginfo-32bit-11.0.8-151.1 Mesa-libGLESv1_CM-devel-32bit-11.0.8-151.1 Mesa-libGLESv1_CM1-32bit-11.0.8-151.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.0.8-151.1 Mesa-libGLESv2-2-32bit-11.0.8-151.1 Mesa-libGLESv2-2-debuginfo-32bit-11.0.8-151.1 Mesa-libGLESv2-devel-32bit-11.0.8-151.1 Mesa-libd3d-32bit-11.0.8-151.1 Mesa-libd3d-debuginfo-32bit-11.0.8-151.1 Mesa-libd3d-devel-32bit-11.0.8-151.1 Mesa-libglapi-devel-32bit-11.0.8-151.1 Mesa-libglapi0-32bit-11.0.8-151.1 Mesa-libglapi0-debuginfo-32bit-11.0.8-151.1 libOSMesa-devel-32bit-11.0.8-151.1 libOSMesa9-32bit-11.0.8-151.1 libOSMesa9-debuginfo-32bit-11.0.8-151.1 libXvMC_nouveau-32bit-11.0.8-151.1 libXvMC_nouveau-debuginfo-32bit-11.0.8-151.1 libXvMC_r600-32bit-11.0.8-151.1 libgbm-devel-32bit-11.0.8-151.1 libgbm1-32bit-11.0.8-151.1 libgbm1-debuginfo-32bit-11.0.8-151.1 libvdpau_nouveau-32bit-11.0.8-151.1 libvdpau_nouveau-debuginfo-32bit-11.0.8-151.1 libvdpau_r300-32bit-11.0.8-151.1 libvdpau_r600-32bit-11.0.8-151.1 libvdpau_radeonsi-32bit-11.0.8-151.1 libwayland-egl-devel-32bit-11.0.8-151.1 libwayland-egl1-32bit-11.0.8-151.1 libwayland-egl1-debuginfo-32bit-11.0.8-151.1 References: https://bugzilla.suse.com/985650

1 0