September 2016 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2016:2241-1: moderate: Recommended update for pacemaker
by maintenance＠opensuse.org 05 Sep '16

05 Sep '16

openSUSE Recommended Update: Recommended update for pacemaker ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2241-1 Rating: moderate References: #956500 #967254 #967383 #967775 #970733 #971129 #972187 #974108 #975079 #976271 #976865 #977201 #977258 #977675 #977800 #981489 #981731 #986056 #986201 #986265 #986676 #986931 #987348 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 23 recommended fixes can now be installed. Description: This update for pacemaker fixes the following issues: - crm_mon: Avoid logging errors for any CIB changes that we don't care about (bsc#986931) - crmd: When node load was reduced, crmd carries out a feasible action. - ping: Log sensible error when /tmp is full (bsc#987348) - crm_mon: Do not log errors for the known CIB changes that should be ignored (bsc#986931) - libservices: include socket units when listing all systemd agents - fencing: fence_legacy - Search capable devices by querying them through "list" action for cluster-glue stonith agents (bsc#986265) - pengine,tools: Display pending resource state by default when it's available (bsc#986201) - systemd: Allow unit names ending in .socket. - crmd: mention that graceful remote shutdowns may cause connection failures (bsc#981489) - libais,libcluster,libcrmcommon,liblrmd: don't use %z specifier - tools: crm_resource -T option should not be hidden anymore - PE: Correctly update the dependent actions of un-runnable clones - attrd,ipc: Prevent possible segfault on exit (bsc#986056) - tools: properly handle crm_resource --restart with a resource in a group - tools: don't assume all resources restart on same node with crm_resource --restart - tools: avoid memory leaks in crm_resource --restart - tools: remember any existing target-role when doing crm_resource --restart - tools: correctly count starting resources when doing crm_resource --restart - Add logrotate to requirements of pacemaker-cli - libcrmcommon: really ensure crm_time_t structure is fully initialized by API calls - crmd: avoid timeout on older peers when cancelling a resource operation - crmd: use proper resource agent name when caching metadata - crmd: avoid memory leak when sending fencing alert - liblrmd: avoid memory leak when closing or deleting lrmd connections - tools: avoid memory leak when crm_mon unpacks constraints - pengine: avoid use-after-free with location constraint + sets + templates - pengine: better error handling when unpacking sets in location constraints - pengine: avoid memory leak when invalid constraint involves set - cts: avoid kill usage error if DummySD stop called when already stopped - pengine : Correction of the record judgment of the failed information. - crmd: clear remote node transient attributes on disconnect (bsc#981489) - Revert "Fix: attrd: Correctly implement mass removal of a node's attributes" (bsc#981489) - attrd: ensure remote nodes are in correct peer cache (bsc#981489) - crmd: set remote flag when gracefully shutting down remote nodes (bsc#981489) - crmd: Graceful proxy shutdown is now tested (bsc#981489) - crmd: Set the shutdown transient attribute in response to LRMD_IPC_OP_SHUTDOWN_REQ from remote nodes (bsc#981489) - PE: Honor the shutdown transient attributes for remote nodes (bsc#981489) - pacemaker_remote: support graceful stops (bsc#981489) - crmd: support graceful pacemaker_remote stops (bsc#981489) - lrmd,liblrmd: add lrmd IPC operations for requesting and acknowledging shutdown (bsc#981489) - cts: simulate pacemaker_remote failure with kill (bsc#981489) - crmd,lrmd,liblrmd: use defined constants for lrmd IPC operations (bsc#981489) - lrmd: make proxied IPC providers/clients opaque (bsc#981489) - lrmd: handle shutdown a little more cleanly (bsc#981489) - libpengine: log message when stonith disabled, not enabled - pengine: only set unfencing constraints once - libcrmcommon: ensure crm_time_t structure is fully initialized by API calls - attrd: don't leak memory when returning due to malformed update request - pengine: properly order stop actions relative to stonith - crm_resource: don't pretend that target-role:started would prevent promotion - crm_mon: consistently print ms resource state - controld: use "stonith_admin -H '*' -V" (bsc#977201) - stonith_admin: allow -H '*' to show history for all nodes (bsc#977201) - controld: fix "[: -eq: unary operator expected" issue from PR 1022 (bsc#977201) - controld: Prevent unwanted self-fencing if "stateful_merge_wait" state of dlm is not available (bsc#977201) - spec: fence_pcmk only eligible for Pacemaker+CMAN - crmd: Acknowledge cancellation operations for remote connection resources (bsc#976865) - controld: improve DLM check with stateful_merge_wait (bsc#977201) - attrd, libcrmcommon: validate attrd requests better - crm_mon: Fix time formatting on x32 - resources: use OCF version tagging correctly - libcommon: crm_procfs_pid_of() would always return last /proc entry checked - crmd: Take start-delay into account for the timeout of the action timer (bsc#977258) - libservices: make systemd override file world-readable to avoid log warning - libcrmcommon: correct directory name in log message - pengine: Correctly set the environment variable "OCF_RESKEY_CRM_meta_timeout" when "start-delay" is configured (bsc#977258) - services: Correctly clean up service actions for non-dbus case - RA: SysInfo - Reset the node attribute "#health_disk" to "green" when there's sufficient free disk (bsc#975079) - pengine: Organize order of actions for slave resources in anti-colocations (bsc#977800) - pengine: Organize order of actions for master resources in anti-colocations (bsc#977800) - pengine: Respect asymmetrical ordering when trying to move resources (bsc#977675) - fencing: Record the last known names of nodes to make sure fencing requested with nodeid works (bsc#974108) - ping resource: Use fping6 for IPv6 hosts (bsc#976271) - pengine: Consider resource failed if any of the configured monitor operations failed (bsc#972187) - spec: make Publican docs not depend on pre-existing packages - cib/fencing: Set status callback before connecting to cluster (bsc#974108) - libtransition: potential memory leak if unpacking action fails - attrd: crash on exit if initialization fails - pengine: Suppress assert if a stateful clone is not being demoted/stopped (bsc#971129) - PE: Correctly handle the ordering of demote actions for failed and moving containers - libcib: Correctly determine the node type (bsc#967775) - resources: match agents' default for globally_unique to pacemaker's - crm_resource: Prevent segfault when --resource is not correctly supplied for --restart command Additionally, the following bug-references have been added to the changelog: bsc#986676, bsc#981731, bsc#970733, bsc#967383, bsc#967254, bsc#956500 This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1052=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libpacemaker-devel-1.1.13-20.1 libpacemaker3-1.1.13-20.1 libpacemaker3-debuginfo-1.1.13-20.1 pacemaker-1.1.13-20.1 pacemaker-cli-1.1.13-20.1 pacemaker-cli-debuginfo-1.1.13-20.1 pacemaker-cts-1.1.13-20.1 pacemaker-cts-debuginfo-1.1.13-20.1 pacemaker-debuginfo-1.1.13-20.1 pacemaker-debugsource-1.1.13-20.1 pacemaker-remote-1.1.13-20.1 pacemaker-remote-debuginfo-1.1.13-20.1 References: https://bugzilla.suse.com/956500 https://bugzilla.suse.com/967254 https://bugzilla.suse.com/967383 https://bugzilla.suse.com/967775 https://bugzilla.suse.com/970733 https://bugzilla.suse.com/971129 https://bugzilla.suse.com/972187 https://bugzilla.suse.com/974108 https://bugzilla.suse.com/975079 https://bugzilla.suse.com/976271 https://bugzilla.suse.com/976865 https://bugzilla.suse.com/977201 https://bugzilla.suse.com/977258 https://bugzilla.suse.com/977675 https://bugzilla.suse.com/977800 https://bugzilla.suse.com/981489 https://bugzilla.suse.com/981731 https://bugzilla.suse.com/986056 https://bugzilla.suse.com/986201 https://bugzilla.suse.com/986265 https://bugzilla.suse.com/986676 https://bugzilla.suse.com/986931 https://bugzilla.suse.com/987348

1 0

openSUSE-RU-2016:2238-1: moderate: Recommended update for VirtualGL
by maintenance＠opensuse.org 05 Sep '16

05 Sep '16

openSUSE Recommended Update: Recommended update for VirtualGL ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2238-1 Rating: moderate References: #993645 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 2.5 for VirtualGL: - Fix boo#993645 as-needed eating symbols needed by this lib * virtualgl-nodl.patch - Use system xcb headers - Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive - Version update to 2.5 release * See upstream changelog for details * Mostly removal of compat for pre-VirtualGL namespace Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1051=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): VirtualGL-2.5-3.1 VirtualGL-debuginfo-2.5-3.1 VirtualGL-debugsource-2.5-3.1 VirtualGL-devel-2.5-3.1 - openSUSE Leap 42.1 (x86_64): VirtualGL-32bit-2.5-3.1 VirtualGL-debuginfo-32bit-2.5-3.1 References: https://bugzilla.suse.com/993645

1 0

openSUSE-RU-2016:2237-1: moderate: Recommended update for gnome-maps
by maintenance＠opensuse.org 05 Sep '16

05 Sep '16

openSUSE Recommended Update: Recommended update for gnome-maps ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2237-1 Rating: moderate References: #995112 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update provides version 3.14.4 for gnome-maps: - Update to version 3.14.4 (boo#995112): + Download a service.json file to get tile server URI among other things. + Use GtkClutter for the attribution logo, to get transparency. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1049=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1049=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gnome-maps-3.16.4-11.1 gnome-maps-debuginfo-3.16.4-11.1 gnome-maps-debugsource-3.16.4-11.1 - openSUSE Leap 42.1 (noarch): gnome-maps-lang-3.16.4-11.1 - openSUSE 13.2 (i586 x86_64): gnome-maps-3.14.4-12.1 gnome-maps-debuginfo-3.14.4-12.1 gnome-maps-debugsource-3.14.4-12.1 - openSUSE 13.2 (noarch): gnome-maps-lang-3.14.4-12.1 References: https://bugzilla.suse.com/995112

1 0

openSUSE-RU-2016:2236-1: Recommended update for timezone
by maintenance＠opensuse.org 05 Sep '16

05 Sep '16

openSUSE Recommended Update: Recommended update for timezone ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2236-1 Rating: low References: #988184 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for timezone adds a positive leap second at the end of 2016-12-31. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1050=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): timezone-2016f-0.25.1 timezone-debuginfo-2016f-0.25.1 timezone-debugsource-2016f-0.25.1 - openSUSE Leap 42.1 (noarch): timezone-java-2016f-0.25.1 References: https://bugzilla.suse.com/988184

1 0

openSUSE-RU-2016:2235-1: moderate: Recommended update for ucode-intel
by maintenance＠opensuse.org 05 Sep '16

05 Sep '16

openSUSE Recommended Update: Recommended update for ucode-intel ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2235-1 Rating: moderate References: #958562 #987358 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This recommended update for ucode-intel fixes the following issues: - Update to version 20160714. - Should fix boo#987358, a bug which got introduced with the last release. - Update to version 20160607, no changelog available - Fix dependency on coreutils for initrd macros (boo#958562) - Call missing initrd macro at postun (boo#958562) - Fix Url and Source0 - Add GenuineIntel.bin to ucode-intel-blob - Update to version 20151106 * No changelog available - Use download Url as source - Add ucode-intel-blob subpackage to get the full microcode.dat directly Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1048=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ucode-intel-20160714-5.1 ucode-intel-blob-20160714-5.1 ucode-intel-debuginfo-20160714-5.1 ucode-intel-debugsource-20160714-5.1 References: https://bugzilla.suse.com/958562 https://bugzilla.suse.com/987358

1 0

openSUSE-RU-2016:2234-1: moderate: Recommended update for wine
by maintenance＠opensuse.org 04 Sep '16

04 Sep '16

openSUSE Recommended Update: Recommended update for wine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2234-1 Rating: moderate References: #960661 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for wine fixes the following issues: - Updated to 1.8.4 release (boo#960661) - Various bug fixes. - Small translation updates. - updated winetricks Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1047=1 - openSUSE 13.2: zypper in -t patch openSUSE-2016-1047=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): wine-1.8.4-12.1 wine-debuginfo-1.8.4-12.1 wine-debugsource-1.8.4-12.1 wine-devel-1.8.4-12.1 wine-devel-debuginfo-1.8.4-12.1 - openSUSE Leap 42.1 (x86_64): wine-32bit-1.8.4-12.1 wine-debuginfo-32bit-1.8.4-12.1 wine-devel-32bit-1.8.4-12.1 wine-devel-debuginfo-32bit-1.8.4-12.1 - openSUSE 13.2 (i586 x86_64): wine-1.8.4-12.1 wine-debuginfo-1.8.4-12.1 wine-debugsource-1.8.4-12.1 wine-devel-1.8.4-12.1 wine-devel-debuginfo-1.8.4-12.1 - openSUSE 13.2 (x86_64): wine-32bit-1.8.4-12.1 wine-debuginfo-32bit-1.8.4-12.1 wine-devel-32bit-1.8.4-12.1 wine-devel-debuginfo-32bit-1.8.4-12.1 References: https://bugzilla.suse.com/960661

1 0

openSUSE-SU-2016:2233-1: moderate: Security update for dosfstools
by opensuse-security＠opensuse.org 04 Sep '16

04 Sep '16

openSUSE Security Update: Security update for dosfstools ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2233-1 Rating: moderate References: #912607 #980364 #980377 Cross-References: CVE-2015-8872 CVE-2016-4804 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that solves two vulnerabilities and has one errata is now available. Description: dosfstools was updated to fix two security issues. These security issues were fixed: - CVE-2015-8872: The set_fat function in fat.c in dosfstools might have allowed attackers to corrupt a FAT12 filesystem or cause a denial of service (invalid memory read and crash) by writing an odd number of clusters to the third to last entry on a FAT12 filesystem, which triggers an "off-by-two error (bsc#980364). - CVE-2016-4804: The read_boot function in boot.c in dosfstools allowed attackers to cause a denial of service (crash) via a crafted filesystem, which triggers a heap-based buffer overflow in the (1) read_fat function or an out-of-bounds heap read in (2) get_fat function (bsc#980377). This non-security issue was fixed: - bsc#912607: Attempt to rename root dir in fsck due to uninitialized fields. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1045=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dosfstools-3.0.26-9.1 dosfstools-debuginfo-3.0.26-9.1 dosfstools-debugsource-3.0.26-9.1 References: https://www.suse.com/security/cve/CVE-2015-8872.html https://www.suse.com/security/cve/CVE-2016-4804.html https://bugzilla.suse.com/912607 https://bugzilla.suse.com/980364 https://bugzilla.suse.com/980377

1 0

openSUSE-SU-2016:2232-1: moderate: Security update for xerces-c
by opensuse-security＠opensuse.org 04 Sep '16

04 Sep '16

openSUSE Security Update: Security update for xerces-c ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2232-1 Rating: moderate References: #979208 #985860 Cross-References: CVE-2016-2099 CVE-2016-4463 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: xerces-c was updated to fix one security issue. This security issue was fixed: - CVE-2016-2099: Use-after-free vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ did not properly handle exceptions raised in the XMLReader class, which allowed context-dependent attackers to have unspecified impact via an invalid character in an XML document (bsc#979208). - CVE-2016-4463: Apache Xerces-C XML Parser crashed on malformed DTD (bnc#985860). This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1046=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libxerces-c-3_1-3.1.1-19.1 libxerces-c-3_1-debuginfo-3.1.1-19.1 libxerces-c-devel-3.1.1-19.1 xerces-c-3.1.1-19.1 xerces-c-debuginfo-3.1.1-19.1 xerces-c-debugsource-3.1.1-19.1 - openSUSE Leap 42.1 (x86_64): libxerces-c-3_1-32bit-3.1.1-19.1 libxerces-c-3_1-debuginfo-32bit-3.1.1-19.1 References: https://www.suse.com/security/cve/CVE-2016-2099.html https://www.suse.com/security/cve/CVE-2016-4463.html https://bugzilla.suse.com/979208 https://bugzilla.suse.com/985860

1 0

openSUSE-RU-2016:2231-1: Recommended update for clamav-database
by maintenance＠opensuse.org 03 Sep '16

03 Sep '16

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2016:2231-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for clamav-database fixes the following issues: - Database refresh August 29th. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2016-1044=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): clamav-database-201608290003-149.1 References:

1 0

openSUSE-SU-2016:2227-1: moderate: Security update for curl
by opensuse-security＠opensuse.org 02 Sep '16

02 Sep '16

openSUSE Security Update: Security update for curl ______________________________________________________________________________ Announcement ID: openSUSE-SU-2016:2227-1 Rating: moderate References: #991389 #991390 #991391 #991746 Cross-References: CVE-2016-5419 CVE-2016-5420 CVE-2016-5421 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: This update for curl fixes the following issues: - fixing a performance regression with FTP (boo#991746) - TLS session resumption client cert bypass (boo#991389, CVE-2016-5419) - Re-using connections with wrong client cert (boo#991390, CVE-2016-5420) - use of connection struct after free (boo#991391, CVE-2016-5421) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2016-1043=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): curl-7.42.1-25.1 curl-debuginfo-7.42.1-25.1 curl-debugsource-7.42.1-25.1 libcurl-devel-7.42.1-25.1 libcurl4-7.42.1-25.1 libcurl4-debuginfo-7.42.1-25.1 - openSUSE 13.2 (x86_64): libcurl-devel-32bit-7.42.1-25.1 libcurl4-32bit-7.42.1-25.1 libcurl4-debuginfo-32bit-7.42.1-25.1 References: https://www.suse.com/security/cve/CVE-2016-5419.html https://www.suse.com/security/cve/CVE-2016-5420.html https://www.suse.com/security/cve/CVE-2016-5421.html https://bugzilla.suse.com/991389 https://bugzilla.suse.com/991390 https://bugzilla.suse.com/991391 https://bugzilla.suse.com/991746

1 0