January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0280-1: moderate: Recommended update for python-funcsigs, python-mock, transifex-client
by maintenance＠opensuse.org 25 Jan '17

25 Jan '17

openSUSE Recommended Update: Recommended update for python-funcsigs, python-mock, transifex-client ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0280-1 Rating: moderate References: #998556 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: Recommended update transifex-client and required Python packages. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-144=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (noarch): python-funcsigs-1.0.2-4.1 python-mock-2.0.0-3.1 transifex-client-0.12.2-4.1 References: https://bugzilla.suse.com/998556

1 0

openSUSE-FU-2017:0277-1: moderate: Add Django and related add-ons to the SUSE Package Hub
by maintenance＠opensuse.org 25 Jan '17

25 Jan '17

openSUSE Feature Update: Add Django and related add-ons to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-FU-2017:0277-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 feature fixes can now be installed. Description: This update adds Django, a high-level Python Web framework, and related add-ons to the SUSE Package Hub. The following packages are included: - python-Django 1.9.9, A high-level Python Web framework - python-certifi 2016.2.28, Python package for providing Mozilla's CA Bundle - python-django-appconf, 1.0.1, A Helper Class for Handling Configuration Defaults of Packaged Apps - python-django-athumb 2.0, A simple, S3-backed thumbnailer field - python-django-auth-ldap 1.2.6, Django LDAP authentication backend - python-django-avatar 2.0, Django-avatar package - python-django-dbtemplates 1.3, Template loader for templates stored in the database - python-django-grappelli 2.6.4, A jazzy skin for the Django Admin-Interface - python-django-guardian 1.2.5, Implementation of per object permissions for Django - python-django-international 0.0.6, Country and currency data for Django projects - python-django-mailer 0.1.0, A reusable Django app for queuing the sending of email - python-django-mediasync 2.2.0, Django static media development and distribution tools - python-django-navigation 0.8.1, Extensible breadcrumbs navigation for Django - python-django-picklefield 0.3.1, Pickled object field for Django - python-django-piston 0.2.3, Piston is a Django mini-framework creating APIs - python-django-registration 2.0.4, extensible user-registration application for Django - python-django-reversion 1.8.6, An app that provides comprehensive version control facilities for Django - python-django-static 1.5.5, Template tags for better serving static files from templates - python-slimmer 0.1.30, HTML, XHTML, CSS, JavaScript optimizer - python-versiontools 1.9.1, Smart replacement for plain tuple used in __version__ Patch Instructions: To install this openSUSE Feature Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-142=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): python-certifi-2016.2.28-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): python-Django-1.9.9-2.1 python-django-appconf-1.0.1-2.1 python-django-athumb-2.0-2.1 python-django-auth-ldap-1.2.6-2.1 python-django-avatar-2.0-2.1 python-django-dbtemplates-1.3-2.1 python-django-grappelli-2.6.4-2.1 python-django-guardian-1.2.5-2.1 python-django-international-0.0.6-2.1 python-django-mailer-0.1.0-2.1 python-django-mediasync-2.2.0-2.1 python-django-navigation-0.8.1-2.1 python-django-picklefield-0.3.1-2.1 python-django-piston-0.2.3-2.1 python-django-registration-2.0.4-2.1 python-django-reversion-1.8.6-2.1 python-django-static-1.5.5-2.1 python-slimmer-0.1.30-2.1 python-versiontools-1.9.1-2.1 References:

1 0

openSUSE-OU-2017:0276-1: moderate: Add apache2-mod_fcgid and dependencies to the SUSE Package Hub
by maintenance＠opensuse.org 25 Jan '17

25 Jan '17

openSUSE Optional Update: Add apache2-mod_fcgid and dependencies to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0276-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update adds apache2-mod_fcgid to the SUSE Package Hub. The following packages are included: - apache2-mod_fcgid, 2.3.9, an alternative FastCGI module for Apache2 - apache-rpm-macros 20160120, Apache RPM Macros - apache-rpm-macros-control 20151110, Apache RPM Macros Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-143=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): apache-rpm-macros-20160120-2.2 apache-rpm-macros-control-20151110-2.2 apache2-mod_fcgid-2.3.9-2.2 References:

1 0

openSUSE-SU-2017:0270-1: moderate: Security update for virtualbox
by opensuse-security＠opensuse.org 24 Jan '17

24 Jan '17

openSUSE Security Update: Security update for virtualbox ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0270-1 Rating: moderate References: #1005621 #1014694 #1018340 Cross-References: CVE-2016-5501 CVE-2016-5538 CVE-2016-5605 CVE-2016-5608 CVE-2016-5610 CVE-2016-5611 CVE-2016-561313 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 7 vulnerabilities is now available. Description: This update for virtualbox fixes the following issues: - The version has been updated from 5.1.8 to 5.1.12. Upstream fixed various functional and security issues. - Multiple security issues have been fixed that could cause DoS and possibly privilege escalation (CVE-2016-5501,CVE-2016-5538,CVE-2016-5605,CVE-2016-5608,CVE-2016-5610, CVE-2016-5611,CVE-2016-561313, boo#1005621) - A security warning regarding USB passthru has been added. It will be shown only the first time virtualbox is started. (bnc#1018340) - Reverted a previously introduced user interface scaling change, because it caused problems (https://forums.opensuse.org/showthread.php/521520-VirtualBox-interface-sca ling, bsc#1014694) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-141=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): virtualbox-guest-desktop-icons-5.1.12-6.1 virtualbox-host-source-5.1.12-6.1 - openSUSE Leap 42.2 (x86_64): python-virtualbox-5.1.12-6.1 python-virtualbox-debuginfo-5.1.12-6.1 virtualbox-5.1.12-6.1 virtualbox-debuginfo-5.1.12-6.1 virtualbox-debugsource-5.1.12-6.1 virtualbox-devel-5.1.12-6.1 virtualbox-guest-kmp-default-5.1.12_k4.4.36_8-6.1 virtualbox-guest-kmp-default-debuginfo-5.1.12_k4.4.36_8-6.1 virtualbox-guest-tools-5.1.12-6.1 virtualbox-guest-tools-debuginfo-5.1.12-6.1 virtualbox-guest-x11-5.1.12-6.1 virtualbox-guest-x11-debuginfo-5.1.12-6.1 virtualbox-host-kmp-default-5.1.12_k4.4.36_8-6.1 virtualbox-host-kmp-default-debuginfo-5.1.12_k4.4.36_8-6.1 virtualbox-qt-5.1.12-6.1 virtualbox-qt-debuginfo-5.1.12-6.1 virtualbox-websrv-5.1.12-6.1 virtualbox-websrv-debuginfo-5.1.12-6.1 References: https://www.suse.com/security/cve/CVE-2016-5501.html https://www.suse.com/security/cve/CVE-2016-5538.html https://www.suse.com/security/cve/CVE-2016-5605.html https://www.suse.com/security/cve/CVE-2016-5608.html https://www.suse.com/security/cve/CVE-2016-5610.html https://www.suse.com/security/cve/CVE-2016-5611.html https://www.suse.com/security/cve/CVE-2016-561313.html https://bugzilla.suse.com/1005621 https://bugzilla.suse.com/1014694 https://bugzilla.suse.com/1018340

1 0

openSUSE-RU-2017:0269-1: Recommended update for opera
by maintenance＠opensuse.org 24 Jan '17

24 Jan '17

openSUSE Recommended Update: Recommended update for opera ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0269-1 Rating: low References: Affected Products: openSUSE Leap 42.2:NonFree openSUSE Leap 42.1:NonFree ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for opera fixes the following issues: - Fix displaying Chinese websites. - Fix notification setting icon to correctly open notification exceptions settings. - Firewall prompt triggered on start with media-router flag enabled. - Fix H264 video. - Show unsorted Bookmarks. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2:NonFree: zypper in -t patch openSUSE-2017-140=1 - openSUSE Leap 42.1:NonFree: zypper in -t patch openSUSE-2017-140=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2:NonFree (x86_64): opera-42.0.2393.137-15.1 - openSUSE Leap 42.1:NonFree (x86_64): opera-42.0.2393.137-52.1 References:

1 0

openSUSE-RU-2017:0265-1: moderate: Recommended update for mate-notification-daemon
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for mate-notification-daemon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0265-1 Rating: moderate References: #1019735 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for mate-notification-daemon fixes the following issues: - Fix markup parsing. (boo#1019735) - Update translations. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-139=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): mate-notification-daemon-1.16.1-3.1 mate-notification-daemon-debuginfo-1.16.1-3.1 mate-notification-daemon-debugsource-1.16.1-3.1 - openSUSE Leap 42.2 (noarch): mate-notification-daemon-lang-1.16.1-3.1 References: https://bugzilla.suse.com/1019735

1 0

openSUSE-RU-2017:0262-1: moderate: Recommended update for plasma5-addons
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for plasma5-addons ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0262-1 Rating: moderate References: #1020020 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This recommended update for plasma5-addons fixes the following issues: - Add upstream patches from Plasma/5.8 branch, now roughly equal to 5.8.5: Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-138=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): plasma5-addons-5.8.3-7.1 plasma5-addons-debuginfo-5.8.3-7.1 plasma5-addons-debugsource-5.8.3-7.1 - openSUSE Leap 42.2 (noarch): plasma5-addons-lang-5.8.3-7.1 References: https://bugzilla.suse.com/1020020

1 0

openSUSE-RU-2017:0261-1: Recommended update for gdk-pixbuf
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0261-1 Rating: low References: #1010497 #929462 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdk-pixbuf provides the following fixes: - Fix RGBA conversion for big endian X11 environments. (bsc#929462, bsc#1010497) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-136=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gdk-pixbuf-debugsource-2.34.0-5.1 gdk-pixbuf-devel-2.34.0-5.1 gdk-pixbuf-devel-debuginfo-2.34.0-5.1 gdk-pixbuf-query-loaders-2.34.0-5.1 gdk-pixbuf-query-loaders-debuginfo-2.34.0-5.1 libgdk_pixbuf-2_0-0-2.34.0-5.1 libgdk_pixbuf-2_0-0-debuginfo-2.34.0-5.1 typelib-1_0-GdkPixbuf-2_0-2.34.0-5.1 - openSUSE Leap 42.2 (noarch): gdk-pixbuf-lang-2.34.0-5.1 - openSUSE Leap 42.2 (x86_64): gdk-pixbuf-devel-32bit-2.34.0-5.1 gdk-pixbuf-devel-debuginfo-32bit-2.34.0-5.1 gdk-pixbuf-query-loaders-32bit-2.34.0-5.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.34.0-5.1 libgdk_pixbuf-2_0-0-32bit-2.34.0-5.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.34.0-5.1 References: https://bugzilla.suse.com/1010497 https://bugzilla.suse.com/929462

1 0

openSUSE-RU-2017:0260-1: Recommended update for yast2
by maintenance＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Recommended Update: Recommended update for yast2 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0260-1 Rating: low References: #966413 #972575 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for yast2 fixes the following issues: - Add-on module: Do not escape characters like ":" in the path string. (bsc#966413) - Filter out INTERFACETYPE option from ifcfg files. This option used to be written with incorrect value by older versions of YaST. (bsc#972575) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-134=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): yast2-3.1.155.5-6.1 yast2-devel-doc-3.1.155.5-6.1 References: https://bugzilla.suse.com/966413 https://bugzilla.suse.com/972575

1 0

openSUSE-SU-2017:0259-1: moderate: Security update for python3-sleekxmpp
by opensuse-security＠opensuse.org 23 Jan '17

23 Jan '17

openSUSE Security Update: Security update for python3-sleekxmpp ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0259-1 Rating: moderate References: #1014976 Cross-References: CVE-2015-8688 CVE-2016-9928 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for python3-sleekxmpp fixes the following issues: - Check the origin of roster pushes (2015-8688, 2016-9928, boo#1014976). Also see https://gultsch.de/gajim_roster_push_and_message_interception.html - An error in legacyauth support was fixed Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-137=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): python3-sleekxmpp-1.3.1-3.1 References: https://www.suse.com/security/cve/CVE-2015-8688.html https://www.suse.com/security/cve/CVE-2016-9928.html https://bugzilla.suse.com/1014976

1 0