January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0147-1: Recommended update for dirmngr
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for dirmngr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0147-1 Rating: low References: #994794 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dirmngr enables support for daemon mode. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-98=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dirmngr-1.1.1-11.1 dirmngr-debuginfo-1.1.1-11.1 dirmngr-debugsource-1.1.1-11.1 - openSUSE Leap 42.2 (noarch): dirmngr-lang-1.1.1-11.1 References: https://bugzilla.suse.com/994794

1 0

openSUSE-SU-2017:0146-1: important: Security update for icinga
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for icinga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0146-1 Rating: important References: #1014637 #952777 Cross-References: CVE-2015-8010 CVE-2016-9566 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icinga includes various upstream fixes and the following security security fixes: - icinga was updated to version 1.14.0 - the classic-UI was vulnerable to a cross site scripting attack (CVE-2015-8010, boo#952777) - A user with nagios privileges could have gained root privileges by placing a symbolic link at the logfile location (CVE-2016-9566, boo#1014637) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-100=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): icinga-1.14.0-4.1 icinga-debuginfo-1.14.0-4.1 icinga-debugsource-1.14.0-4.1 icinga-devel-1.14.0-4.1 icinga-doc-1.14.0-4.1 icinga-idoutils-1.14.0-4.1 icinga-idoutils-debuginfo-1.14.0-4.1 icinga-idoutils-mysql-1.14.0-4.1 icinga-idoutils-oracle-1.14.0-4.1 icinga-idoutils-pgsql-1.14.0-4.1 icinga-plugins-downtimes-1.14.0-4.1 icinga-plugins-eventhandlers-1.14.0-4.1 icinga-www-1.14.0-4.1 icinga-www-config-1.14.0-4.1 icinga-www-debuginfo-1.14.0-4.1 monitoring-tools-1.14.0-4.1 monitoring-tools-debuginfo-1.14.0-4.1 - openSUSE Leap 42.1 (i586 x86_64): icinga-1.14.0-3.1 icinga-debuginfo-1.14.0-3.1 icinga-debugsource-1.14.0-3.1 icinga-devel-1.14.0-3.1 icinga-doc-1.14.0-3.1 icinga-idoutils-1.14.0-3.1 icinga-idoutils-debuginfo-1.14.0-3.1 icinga-idoutils-mysql-1.14.0-3.1 icinga-idoutils-oracle-1.14.0-3.1 icinga-idoutils-pgsql-1.14.0-3.1 icinga-plugins-downtimes-1.14.0-3.1 icinga-plugins-eventhandlers-1.14.0-3.1 icinga-www-1.14.0-3.1 icinga-www-config-1.14.0-3.1 icinga-www-debuginfo-1.14.0-3.1 monitoring-tools-1.14.0-3.1 monitoring-tools-debuginfo-1.14.0-3.1 References: https://www.suse.com/security/cve/CVE-2015-8010.html https://www.suse.com/security/cve/CVE-2016-9566.html https://bugzilla.suse.com/1014637 https://bugzilla.suse.com/952777

1 0

openSUSE-SU-2017:0145-1: moderate: Security update for gstreamer-0_10-plugins-base
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0145-1 Rating: moderate References: #1013669 Cross-References: CVE-2016-9811 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-0_10-plugins-base fixes the following issue: - CVE-2016-9811: out of bounds memory read in windows_icon_typefind (bsc#1013669) ---------- Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-89=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gstreamer-0_10-plugin-gnomevfs-0.10.36-11.3.1 gstreamer-0_10-plugin-gnomevfs-debuginfo-0.10.36-11.3.1 gstreamer-0_10-plugins-base-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debuginfo-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debugsource-0.10.36-11.3.1 gstreamer-0_10-plugins-base-devel-0.10.36-11.3.1 gstreamer-0_10-plugins-base-doc-0.10.36-11.3.1 libgstapp-0_10-0-0.10.36-11.3.1 libgstapp-0_10-0-debuginfo-0.10.36-11.3.1 libgstinterfaces-0_10-0-0.10.36-11.3.1 libgstinterfaces-0_10-0-debuginfo-0.10.36-11.3.1 typelib-1_0-GstApp-0_10-0.10.36-11.3.1 typelib-1_0-GstInterfaces-0_10-0.10.36-11.3.1 - openSUSE 13.2 (noarch): gstreamer-0_10-plugins-base-lang-0.10.36-11.3.1 - openSUSE 13.2 (x86_64): gstreamer-0_10-plugins-base-32bit-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debuginfo-32bit-0.10.36-11.3.1 libgstapp-0_10-0-32bit-0.10.36-11.3.1 libgstapp-0_10-0-debuginfo-32bit-0.10.36-11.3.1 libgstinterfaces-0_10-0-32bit-0.10.36-11.3.1 libgstinterfaces-0_10-0-debuginfo-32bit-0.10.36-11.3.1 References: https://www.suse.com/security/cve/CVE-2016-9811.html https://bugzilla.suse.com/1013669

1 0

openSUSE-RU-2017:0144-1: moderate: Recommended update for sysdig
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0144-1 Rating: moderate References: #1017181 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysdig fixes the following issues: - Update to version 0.13.0 (boo#1017181): - Add ability to open concatenated capture files. - evtin.* fields can be used also for displaying now. - Fix driver for Kernel 4.9. - Fix on IPv4 mapped IPv6 parsing. - Fix memory leak #694. - Fix issue #687 about connecting to an K8s API server via HTTPS. - Fix compilation issues when using non-bundled OpenSSL #672. - Fix compilation issues under S390 architecture. - Fix various issues on k8s parsing. - Fix stale thread info when parsing processes within containers. (#665) - Avoid getting cwd from driver, causes issues on Kernel 4.8. - Add new filters container.mount.* to match container mount points. - Add new filter container.privileged to match containers running in privileged mode. - Add support for latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available. - Added glob operator for strings, works as classic shell glob path matcher. - Added pmatch operator. - Add less package on docker image. - Enable building on s390x. - Use current macros for KMP building. - Drop sysdig-kmp-preamble. - Use exclusivearch instead of excluding architectures. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-90=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (s390x x86_64): sysdig-0.13.0-8.1 sysdig-kmp-default-0.13.0_k3.12.49_11-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sysdig-kmp-xen-0.13.0_k3.12.49_11-8.1 References: https://bugzilla.suse.com/1017181

1 0

openSUSE-RU-2017:0143-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0143-1 Rating: moderate References: #1007648 #908143 #915218 #975404 #995812 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Set persistent policy to by-path on s390 platforms to prevent the system from hanging during boot when vDISKs are used as swap devices. (bsc#915218) - Correctly handle incomplete ibft bootflag settings. (bsc#1007648) - Do not pass ifname for bonding devices. (bsc#995812) - Give persistent policy precedence over dev mapper names. (bsc#908143) - Fix mdadm doesn't assemble RSTe array in kdump. (bsc#975404) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-96=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dracut-037-77.1 dracut-debuginfo-037-77.1 dracut-debugsource-037-77.1 dracut-fips-037-77.1 References: https://bugzilla.suse.com/1007648 https://bugzilla.suse.com/908143 https://bugzilla.suse.com/915218 https://bugzilla.suse.com/975404 https://bugzilla.suse.com/995812

1 0

openSUSE-SU-2017:0141-1: important: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0141-1 Rating: important References: #1012102 #1012103 #1012104 #1013653 #1013655 #1013663 Cross-References: CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following issues: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102) - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103) - CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104) - CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655) - CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653) - CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-93=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-plugins-good-1.4.5-5.1 gstreamer-plugins-good-debuginfo-1.4.5-5.1 gstreamer-plugins-good-debugsource-1.4.5-5.1 gstreamer-plugins-good-doc-1.4.5-5.1 gstreamer-plugins-good-extra-1.4.5-5.1 gstreamer-plugins-good-extra-debuginfo-1.4.5-5.1 - openSUSE Leap 42.1 (x86_64): gstreamer-plugins-good-32bit-1.4.5-5.1 gstreamer-plugins-good-debuginfo-32bit-1.4.5-5.1 gstreamer-plugins-good-extra-32bit-1.4.5-5.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.4.5-5.1 - openSUSE Leap 42.1 (noarch): gstreamer-plugins-good-lang-1.4.5-5.1 References: https://www.suse.com/security/cve/CVE-2016-9634.html https://www.suse.com/security/cve/CVE-2016-9635.html https://www.suse.com/security/cve/CVE-2016-9636.html https://www.suse.com/security/cve/CVE-2016-9807.html https://www.suse.com/security/cve/CVE-2016-9808.html https://www.suse.com/security/cve/CVE-2016-9810.html https://bugzilla.suse.com/1012102 https://bugzilla.suse.com/1012103 https://bugzilla.suse.com/1012104 https://bugzilla.suse.com/1013653 https://bugzilla.suse.com/1013655 https://bugzilla.suse.com/1013663

1 0

openSUSE-SU-2017:0140-1: Security update for ark
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for ark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0140-1 Rating: low References: #1018648 Cross-References: CVE-2017-5330 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ark fixes the following issues: - CVE-2017-5330: ark could run executable scripts when clicking on them (boo#1018648) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-92=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-92=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ark-16.08.2-3.1 ark-debuginfo-16.08.2-3.1 ark-debugsource-16.08.2-3.1 libkerfuffle16-16.08.2-3.1 libkerfuffle16-debuginfo-16.08.2-3.1 - openSUSE Leap 42.1 (i586 x86_64): ark-15.12.3-18.1 ark-debuginfo-15.12.3-18.1 ark-debugsource-15.12.3-18.1 libkerfuffle15-15.12.3-18.1 libkerfuffle15-debuginfo-15.12.3-18.1 References: https://www.suse.com/security/cve/CVE-2017-5330.html https://bugzilla.suse.com/1018648

1 0

openSUSE-RU-2017:0139-1: moderate: Recommended update for sblim-sfcb
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0139-1 Rating: moderate References: #1008130 #1015155 #923349 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sblim-sfcb fixes the following issues: - Potential segmentation fault due to un-initialized memory access. (bsc#1015155) - Add support for text/xml mimetype. - Do not overwrite configuration file on upgrades. - Some associatorname CIM operations could hang. - CMPIRole not passed to provider context. - Add sslNoSSLv3 and sslNoTLSv1 configuration options. (bsc#923349, bsc#1008130) Please restart the service after applying the update. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-91=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-91=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): sblim-sfcb-1.4.8-4.1 sblim-sfcb-debuginfo-1.4.8-4.1 sblim-sfcb-debugsource-1.4.8-4.1 - openSUSE Leap 42.1 (i586 x86_64): sblim-sfcb-1.4.8-3.1 sblim-sfcb-debuginfo-1.4.8-3.1 sblim-sfcb-debugsource-1.4.8-3.1 References: https://bugzilla.suse.com/1008130 https://bugzilla.suse.com/1015155 https://bugzilla.suse.com/923349

1 0

openSUSE-RU-2017:0137-1: moderate: Recommended update for gdk-pixbuf
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0137-1 Rating: moderate References: #1010497 #929462 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdk-pixbuf fixes the following issues: - issues in RGBA conversion for big endian X11 environments (boo#929462), (boo#1010497) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-79=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-79=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdk-pixbuf-debugsource-2.32.3-12.1 gdk-pixbuf-devel-2.32.3-12.1 gdk-pixbuf-devel-debuginfo-2.32.3-12.1 gdk-pixbuf-query-loaders-2.32.3-12.1 gdk-pixbuf-query-loaders-debuginfo-2.32.3-12.1 libgdk_pixbuf-2_0-0-2.32.3-12.1 libgdk_pixbuf-2_0-0-debuginfo-2.32.3-12.1 typelib-1_0-GdkPixbuf-2_0-2.32.3-12.1 - openSUSE Leap 42.1 (x86_64): gdk-pixbuf-devel-32bit-2.32.3-12.1 gdk-pixbuf-devel-debuginfo-32bit-2.32.3-12.1 gdk-pixbuf-query-loaders-32bit-2.32.3-12.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.32.3-12.1 libgdk_pixbuf-2_0-0-32bit-2.32.3-12.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.32.3-12.1 - openSUSE Leap 42.1 (noarch): gdk-pixbuf-lang-2.32.3-12.1 - openSUSE 13.2 (i586 x86_64): gdk-pixbuf-debugsource-2.32.3-13.1 gdk-pixbuf-devel-2.32.3-13.1 gdk-pixbuf-devel-debuginfo-2.32.3-13.1 gdk-pixbuf-query-loaders-2.32.3-13.1 gdk-pixbuf-query-loaders-debuginfo-2.32.3-13.1 libgdk_pixbuf-2_0-0-2.32.3-13.1 libgdk_pixbuf-2_0-0-debuginfo-2.32.3-13.1 typelib-1_0-GdkPixbuf-2_0-2.32.3-13.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-devel-32bit-2.32.3-13.1 gdk-pixbuf-devel-debuginfo-32bit-2.32.3-13.1 gdk-pixbuf-query-loaders-32bit-2.32.3-13.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.32.3-13.1 libgdk_pixbuf-2_0-0-32bit-2.32.3-13.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.32.3-13.1 - openSUSE 13.2 (noarch): gdk-pixbuf-lang-2.32.3-13.1 References: https://bugzilla.suse.com/1010497 https://bugzilla.suse.com/929462

1 0

openSUSE-RU-2017:0136-1: moderate: Recommended update for spice-gtk
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0136-1 Rating: moderate References: #1016291 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spice-gtk fixes the following issues: - numlocks / capslocks problems when redirecting keyboard (boo#1016291) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-78=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spice-gtk-lang-0.31-4.1 - openSUSE Leap 42.2 (x86_64): libspice-client-glib-2_0-8-0.31-4.1 libspice-client-glib-2_0-8-debuginfo-0.31-4.1 libspice-client-glib-helper-0.31-4.1 libspice-client-glib-helper-debuginfo-0.31-4.1 libspice-client-gtk-2_0-4-0.31-4.1 libspice-client-gtk-2_0-4-debuginfo-0.31-4.1 libspice-client-gtk-3_0-4-0.31-4.1 libspice-client-gtk-3_0-4-debuginfo-0.31-4.1 libspice-controller0-0.31-4.1 libspice-controller0-debuginfo-0.31-4.1 python-SpiceClientGtk-0.31-4.1 python-SpiceClientGtk-debuginfo-0.31-4.1 spice-gtk-0.31-4.1 spice-gtk-debuginfo-0.31-4.1 spice-gtk-debugsource-0.31-4.1 spice-gtk-devel-0.31-4.1 typelib-1_0-SpiceClientGlib-2_0-0.31-4.1 typelib-1_0-SpiceClientGtk-2_0-0.31-4.1 typelib-1_0-SpiceClientGtk-3_0-0.31-4.1 References: https://bugzilla.suse.com/1016291

1 0

openSUSE-RU-2017:0135-1: Recommended update for xf86-video-amdgpu
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for xf86-video-amdgpu ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0135-1 Rating: low References: #1018406 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for xf86-video-amdgpu contains the following changes: - Address AMD graphic issues (GUI flickers) by enablinng amdgpu.ids which lists all supported PCI Id for server in general, but disable it by default for any PCI ID (bnc#1018406) This update syncs the package with SUSE:SLE-12-SP2:GA/xf86-video-amdgpu. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-80=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): xf86-video-amdgpu-1.1.0-3.1 xf86-video-amdgpu-debuginfo-1.1.0-3.1 xf86-video-amdgpu-debugsource-1.1.0-3.1 References: https://bugzilla.suse.com/1018406

1 0

openSUSE-RU-2017:0134-1: Recommended update for kshutdown
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for kshutdown ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0134-1 Rating: low References: #1018729 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for kshutdown contains various minor fixes and improvements: - Use the standard Ctrl+Q shortcut instead of Ctrl+Shift+Q - Support "--version" command line option, ignore "/?" option - translation updates - Make menu titles less distractive and less annoying - Disable incorrectly positioned tool tips in System Tray menu - Adjust the desktop file, including no longer running kshutdown as root Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-77=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): kshutdown-4.0-3.1 kshutdown-debuginfo-4.0-3.1 kshutdown-debugsource-4.0-3.1 References: https://bugzilla.suse.com/1018729

1 0

openSUSE-RU-2017:0133-1: moderate: Recommended update for ModemManager
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for ModemManager ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0133-1 Rating: moderate References: #1017734 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ModemManager fixes the following issues: - ModemManager now recommends libmbim as it uses mbim-proxy (boo#1017734) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-76=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-76=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ModemManager-1.4.14-4.1 ModemManager-debuginfo-1.4.14-4.1 ModemManager-debugsource-1.4.14-4.1 ModemManager-devel-1.4.14-4.1 libmm-glib0-1.4.14-4.1 libmm-glib0-debuginfo-1.4.14-4.1 typelib-1_0-ModemManager-1_0-1.4.14-4.1 - openSUSE Leap 42.2 (noarch): ModemManager-lang-1.4.14-4.1 - openSUSE Leap 42.1 (i586 x86_64): ModemManager-1.4.10-5.1 ModemManager-debuginfo-1.4.10-5.1 ModemManager-debugsource-1.4.10-5.1 ModemManager-devel-1.4.10-5.1 libmm-glib0-1.4.10-5.1 libmm-glib0-debuginfo-1.4.10-5.1 typelib-1_0-ModemManager-1_0-1.4.10-5.1 - openSUSE Leap 42.1 (noarch): ModemManager-lang-1.4.10-5.1 References: https://bugzilla.suse.com/1017734

1 0

openSUSE-RU-2017:0132-1: important: Recommended update for iodine
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for iodine ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0132-1 Rating: important References: #1017236 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for iodine fixes the following issues: - The Iodined.service could not be started due to unbalanced quotes in service files (boo#1017236) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-74=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-74=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): iodine-0.7.0-7.1 iodine-debuginfo-0.7.0-7.1 iodine-debugsource-0.7.0-7.1 - openSUSE Leap 42.1 (i586 x86_64): iodine-0.7.0-6.1 iodine-debuginfo-0.7.0-6.1 iodine-debugsource-0.7.0-6.1 References: https://bugzilla.suse.com/1017236

1 0

openSUSE-RU-2017:0131-1: moderate: Recommended update for libmateweather
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for libmateweather ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0131-1 Rating: moderate References: #1016856 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libmateweather fixes the following issues: - The applet would not load weather data (boo#1016856) Time zone and location information was also updated. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-75=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libmateweather-debugsource-1.10.0-4.1 libmateweather-devel-1.10.0-4.1 libmateweather1-1.10.0-4.1 libmateweather1-debuginfo-1.10.0-4.1 python-mateweather-1.10.0-4.1 python-mateweather-debuginfo-1.10.0-4.1 - openSUSE Leap 42.1 (x86_64): libmateweather1-32bit-1.10.0-4.1 libmateweather1-debuginfo-32bit-1.10.0-4.1 - openSUSE Leap 42.1 (noarch): libmateweather-lang-1.10.0-4.1 mateweather-common-1.10.0-4.1 References: https://bugzilla.suse.com/1016856

1 0

openSUSE-OU-2017:0125-1: moderate: Add ctemplate to SUSE Package Hub
by maintenance＠opensuse.org 13 Jan '17

13 Jan '17

openSUSE Optional Update: Add ctemplate to SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0125-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes ctemplate available in the SUSE Package Hub. CTemplate is a simple but powerful template language for C++. It emphasizes separating logic from presentation: it is impossible to embed application logic in this template language. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-73=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libctemplate-devel-2.3-2.1 libctemplate3-2.3-2.1 References:

1 0

openSUSE-OU-2017:0124-1: moderate: Add mtr to SUSE Package Hub
by maintenance＠opensuse.org 13 Jan '17

13 Jan '17

openSUSE Optional Update: Add mtr to SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0124-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes mtr available in the SUSE Package Hub. Mtr is a network diagnostic tool that combines Ping and Traceroute into one program. This package contains the mtr version with an ncurses interface, in other words, the text mode version is usable in a shell (telnet or SSH session, for example). Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-72=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): mtr-0.87-2.1 mtr-gtk-0.87-2.1 References:

1 0

openSUSE-SU-2017:0107-1: important: Security update for flash-player
by opensuse-security＠opensuse.org 11 Jan '17

11 Jan '17

openSUSE Security Update: Security update for flash-player ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0107-1 Rating: important References: #1019129 Cross-References: CVE-2017-2925 CVE-2017-2926 CVE-2017-2927 CVE-2017-2928 CVE-2017-2930 CVE-2017-2931 CVE-2017-2932 CVE-2017-2933 CVE-2017-2934 CVE-2017-2935 CVE-2017-2936 CVE-2017-2937 CVE-2017-2938 Affected Products: openSUSE 13.2 NonFree ______________________________________________________________________________ An update that fixes 13 vulnerabilities is now available. Description: This update to Adobe Flash 24.0.0.194 fixes the following vulnerabilities advised under APSB17-02: - security bypass vulnerability that could lead to information disclosure (CVE-2017-2938) - use-after-free vulnerabilities that could lead to code execution (CVE-2017-2932, CVE-2017-2936, CVE-2017-2937) - heap buffer overflow vulnerabilities that could lead to code execution (CVE-2017-2927, CVE-2017-2933, CVE-2017-2934, CVE-2017-2935) - memory corruption vulnerabilities that could lead to code execution (CVE-2017-2925, CVE-2017-2926, CVE-2017-2928, CVE-2017-2930, CVE-2017-2931) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2 NonFree: zypper in -t patch openSUSE-2017-71=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 NonFree (i586 x86_64): flash-player-24.0.0.194-2.124.1 flash-player-gnome-24.0.0.194-2.124.1 flash-player-kde4-24.0.0.194-2.124.1 References: https://www.suse.com/security/cve/CVE-2017-2925.html https://www.suse.com/security/cve/CVE-2017-2926.html https://www.suse.com/security/cve/CVE-2017-2927.html https://www.suse.com/security/cve/CVE-2017-2928.html https://www.suse.com/security/cve/CVE-2017-2930.html https://www.suse.com/security/cve/CVE-2017-2931.html https://www.suse.com/security/cve/CVE-2017-2932.html https://www.suse.com/security/cve/CVE-2017-2933.html https://www.suse.com/security/cve/CVE-2017-2934.html https://www.suse.com/security/cve/CVE-2017-2935.html https://www.suse.com/security/cve/CVE-2017-2936.html https://www.suse.com/security/cve/CVE-2017-2937.html https://www.suse.com/security/cve/CVE-2017-2938.html https://bugzilla.suse.com/1019129

1 0

openSUSE-SU-2017:0101-1: important: Security update for jasper
by opensuse-security＠opensuse.org 10 Jan '17

10 Jan '17

openSUSE Security Update: Security update for jasper ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0101-1 Rating: important References: #1010977 #1010979 #1011830 #1012530 #1015993 Cross-References: CVE-2016-8654 CVE-2016-9395 CVE-2016-9398 CVE-2016-9560 CVE-2016-9591 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for jasper fixes the following issues: - CVE-2016-8654: Heap-based buffer overflow in QMFB code in JPC codec. (bsc#1012530) - CVE-2016-9395: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010977) - CVE-2016-9398: Invalid jasper files could lead to abort of the library caused by attacker provided image. (bsc#1010979) - CVE-2016-9560: Stack-based buffer overflow in jpc_tsfb_getbands2. (bsc#1011830) - CVE-2016-9591: Use-after-free on heap in jas_matrix_destroy. (bsc#1015993) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-70=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-70=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): jasper-1.900.14-170.1 jasper-debuginfo-1.900.14-170.1 jasper-debugsource-1.900.14-170.1 libjasper-devel-1.900.14-170.1 libjasper1-1.900.14-170.1 libjasper1-debuginfo-1.900.14-170.1 - openSUSE Leap 42.2 (x86_64): libjasper1-32bit-1.900.14-170.1 libjasper1-debuginfo-32bit-1.900.14-170.1 - openSUSE Leap 42.1 (i586 x86_64): jasper-1.900.14-170.1 jasper-debuginfo-1.900.14-170.1 jasper-debugsource-1.900.14-170.1 libjasper-devel-1.900.14-170.1 libjasper1-1.900.14-170.1 libjasper1-debuginfo-1.900.14-170.1 - openSUSE Leap 42.1 (x86_64): libjasper1-32bit-1.900.14-170.1 libjasper1-debuginfo-32bit-1.900.14-170.1 References: https://www.suse.com/security/cve/CVE-2016-8654.html https://www.suse.com/security/cve/CVE-2016-9395.html https://www.suse.com/security/cve/CVE-2016-9398.html https://www.suse.com/security/cve/CVE-2016-9560.html https://www.suse.com/security/cve/CVE-2016-9591.html https://bugzilla.suse.com/1010977 https://bugzilla.suse.com/1010979 https://bugzilla.suse.com/1011830 https://bugzilla.suse.com/1012530 https://bugzilla.suse.com/1015993

1 0

openSUSE-RU-2017:0095-1: moderate: Recommended update for clamav-database
by maintenance＠opensuse.org 09 Jan '17

09 Jan '17

openSUSE Recommended Update: Recommended update for clamav-database ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0095-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update refreshes the clamav-database. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-68=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-68=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): clamav-database-201701090005-25.1 - openSUSE Leap 42.1 (noarch): clamav-database-201701090005-204.1 References:

1 0

openSUSE-SU-2017:0094-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 09 Jan '17

09 Jan '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0094-1 Rating: moderate References: #1018357 Cross-References: CVE-2017-5193 CVE-2017-5194 CVE-2017-5195 CVE-2017-5196 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: irssi was updated to fix four vulnerabilities that could result in denial of service (remote crash) when connecting to malicious servers or receiving specially crafted data. (boo#1018357) - CVE-2017-5193: NULL pointer dereference in the nickcmp function - CVE-2017-5194: out of bounds read in certain incomplete control codes - CVE-2017-5195: out of bounds read in certain incomplete character sequences - CVE-2017-5196: Correct an error when receiving invalid nick message Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-67=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): irssi-0.8.21-12.1 irssi-debuginfo-0.8.21-12.1 irssi-debugsource-0.8.21-12.1 irssi-devel-0.8.21-12.1 References: https://www.suse.com/security/cve/CVE-2017-5193.html https://www.suse.com/security/cve/CVE-2017-5194.html https://www.suse.com/security/cve/CVE-2017-5195.html https://www.suse.com/security/cve/CVE-2017-5196.html https://bugzilla.suse.com/1018357

1 0

openSUSE-SU-2017:0093-1: moderate: Security update for irssi
by opensuse-security＠opensuse.org 09 Jan '17

09 Jan '17

openSUSE Security Update: Security update for irssi ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0093-1 Rating: moderate References: #1018357 Cross-References: CVE-2017-5193 CVE-2017-5194 CVE-2017-5195 CVE-2017-5196 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: irssi was updated to fix four vulnerabilities that could result in denial of service (remote crash) when connecting to malicious servers or receiving specially crafted data. (boo#1018357) - CVE-2017-5193: NULL pointer dereference in the nickcmp function - CVE-2017-5194: out of bounds read in certain incomplete control codes - CVE-2017-5195: out of bounds read in certain incomplete character sequences - CVE-2017-5196: Correct an error when receiving invalid nick message Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-67=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-67=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-67=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irssi-0.8.21-9.1 irssi-debuginfo-0.8.21-9.1 irssi-debugsource-0.8.21-9.1 irssi-devel-0.8.21-9.1 - openSUSE Leap 42.1 (i586 x86_64): irssi-0.8.21-9.1 irssi-debuginfo-0.8.21-9.1 irssi-debugsource-0.8.21-9.1 irssi-devel-0.8.21-9.1 - openSUSE 13.2 (i586 x86_64): irssi-0.8.21-3.7.1 irssi-debuginfo-0.8.21-3.7.1 irssi-debugsource-0.8.21-3.7.1 irssi-devel-0.8.21-3.7.1 References: https://www.suse.com/security/cve/CVE-2017-5193.html https://www.suse.com/security/cve/CVE-2017-5194.html https://www.suse.com/security/cve/CVE-2017-5195.html https://www.suse.com/security/cve/CVE-2017-5196.html https://bugzilla.suse.com/1018357

1 0

openSUSE-OU-2017:0088-1: moderate: Add mate-common, mate-desktop to the SUSE Package Hub
by maintenance＠opensuse.org 09 Jan '17

09 Jan '17

openSUSE Optional Update: Add mate-common, mate-desktop to the SUSE Package Hub ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0088-1 Rating: moderate References: Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update makes available mate-common, mate-desktop in the SUSE Package Hub. mate-common is an extension to autoconf, automake and libtool for the MATEdesktop environment and MATE applications. mate-autogen, and several macros are included to help in MATE source trees. mate-desktop contains the library with common API for various MATE modules. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-66=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (aarch64 ppc64le s390x x86_64): libmate-desktop-2-17-1.16.1-2.1 mate-desktop-1.16.1-2.1 mate-desktop-devel-1.16.1-2.1 mate-desktop-gschemas-1.16.1-2.1 typelib-1_0-MateDesktop-2_0-1.16.1-2.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (noarch): mate-common-1.16.0-2.1 mate-desktop-gschemas-branding-upstream-1.16.1-2.1 mate-desktop-lang-1.16.1-2.1 References:

1 0

openSUSE-RU-2017:0083-1: Optional update for Mesa
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Optional update for Mesa ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0083-1 Rating: low References: #1015700 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for Mesa fixes the following issues: - build fix for s390x (boo#1015700) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-57=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): Mesa-11.2.2-166.1 Mesa-debuginfo-11.2.2-166.1 Mesa-debugsource-11.2.2-166.1 Mesa-devel-11.2.2-166.1 Mesa-dri-devel-11.2.2-166.1 Mesa-dri-nouveau-11.2.2-166.1 Mesa-libEGL-devel-11.2.2-166.1 Mesa-libEGL1-11.2.2-166.1 Mesa-libEGL1-debuginfo-11.2.2-166.1 Mesa-libGL-devel-11.2.2-166.1 Mesa-libGL1-11.2.2-166.1 Mesa-libGL1-debuginfo-11.2.2-166.1 Mesa-libGLESv1_CM-devel-11.2.2-166.1 Mesa-libGLESv1_CM1-11.2.2-166.1 Mesa-libGLESv1_CM1-debuginfo-11.2.2-166.1 Mesa-libGLESv2-2-11.2.2-166.1 Mesa-libGLESv2-2-debuginfo-11.2.2-166.1 Mesa-libGLESv2-devel-11.2.2-166.1 Mesa-libGLESv3-devel-11.2.2-166.1 Mesa-libOpenCL-11.2.2-166.1 Mesa-libOpenCL-debuginfo-11.2.2-166.1 Mesa-libd3d-11.2.2-166.1 Mesa-libd3d-debuginfo-11.2.2-166.1 Mesa-libd3d-devel-11.2.2-166.1 Mesa-libglapi-devel-11.2.2-166.1 Mesa-libglapi0-11.2.2-166.1 Mesa-libglapi0-debuginfo-11.2.2-166.1 Mesa-libva-11.2.2-166.1 Mesa-libva-debuginfo-11.2.2-166.1 libOSMesa-devel-11.2.2-166.1 libOSMesa9-11.2.2-166.1 libOSMesa9-debuginfo-11.2.2-166.1 libXvMC_nouveau-11.2.2-166.1 libXvMC_nouveau-debuginfo-11.2.2-166.1 libXvMC_r600-11.2.2-166.1 libXvMC_r600-debuginfo-11.2.2-166.1 libgbm-devel-11.2.2-166.1 libgbm1-11.2.2-166.1 libgbm1-debuginfo-11.2.2-166.1 libvdpau_nouveau-11.2.2-166.1 libvdpau_nouveau-debuginfo-11.2.2-166.1 libvdpau_r300-11.2.2-166.1 libvdpau_r300-debuginfo-11.2.2-166.1 libvdpau_r600-11.2.2-166.1 libvdpau_r600-debuginfo-11.2.2-166.1 libvdpau_radeonsi-11.2.2-166.1 libvdpau_radeonsi-debuginfo-11.2.2-166.1 libwayland-egl-devel-11.2.2-166.1 libwayland-egl1-11.2.2-166.1 libwayland-egl1-debuginfo-11.2.2-166.1 libxatracker-devel-1.0.0-166.1 libxatracker2-1.0.0-166.1 libxatracker2-debuginfo-1.0.0-166.1 - openSUSE Leap 42.2 (x86_64): Mesa-32bit-11.2.2-166.1 Mesa-debuginfo-32bit-11.2.2-166.1 Mesa-dri-nouveau-32bit-11.2.2-166.1 Mesa-libEGL-devel-32bit-11.2.2-166.1 Mesa-libEGL1-32bit-11.2.2-166.1 Mesa-libEGL1-debuginfo-32bit-11.2.2-166.1 Mesa-libGL-devel-32bit-11.2.2-166.1 Mesa-libGL1-32bit-11.2.2-166.1 Mesa-libGL1-debuginfo-32bit-11.2.2-166.1 Mesa-libGLESv1_CM-devel-32bit-11.2.2-166.1 Mesa-libGLESv1_CM1-32bit-11.2.2-166.1 Mesa-libGLESv1_CM1-debuginfo-32bit-11.2.2-166.1 Mesa-libGLESv2-2-32bit-11.2.2-166.1 Mesa-libGLESv2-2-debuginfo-32bit-11.2.2-166.1 Mesa-libGLESv2-devel-32bit-11.2.2-166.1 Mesa-libOpenCL-32bit-11.2.2-166.1 Mesa-libOpenCL-debuginfo-32bit-11.2.2-166.1 Mesa-libd3d-32bit-11.2.2-166.1 Mesa-libd3d-debuginfo-32bit-11.2.2-166.1 Mesa-libd3d-devel-32bit-11.2.2-166.1 Mesa-libglapi-devel-32bit-11.2.2-166.1 Mesa-libglapi0-32bit-11.2.2-166.1 Mesa-libglapi0-debuginfo-32bit-11.2.2-166.1 libOSMesa-devel-32bit-11.2.2-166.1 libOSMesa9-32bit-11.2.2-166.1 libOSMesa9-debuginfo-32bit-11.2.2-166.1 libXvMC_nouveau-32bit-11.2.2-166.1 libXvMC_nouveau-debuginfo-32bit-11.2.2-166.1 libXvMC_r600-32bit-11.2.2-166.1 libXvMC_r600-debuginfo-32bit-11.2.2-166.1 libgbm-devel-32bit-11.2.2-166.1 libgbm1-32bit-11.2.2-166.1 libgbm1-debuginfo-32bit-11.2.2-166.1 libvdpau_nouveau-32bit-11.2.2-166.1 libvdpau_nouveau-debuginfo-32bit-11.2.2-166.1 libvdpau_r300-32bit-11.2.2-166.1 libvdpau_r300-debuginfo-32bit-11.2.2-166.1 libvdpau_r600-32bit-11.2.2-166.1 libvdpau_r600-debuginfo-32bit-11.2.2-166.1 libvdpau_radeonsi-32bit-11.2.2-166.1 libvdpau_radeonsi-debuginfo-32bit-11.2.2-166.1 libwayland-egl-devel-32bit-11.2.2-166.1 libwayland-egl1-32bit-11.2.2-166.1 libwayland-egl1-debuginfo-32bit-11.2.2-166.1 References: https://bugzilla.suse.com/1015700

1 0

openSUSE-SU-2017:0082-1: Security update for libcares2
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for libcares2 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0082-1 Rating: low References: #1007728 Cross-References: CVE-2016-5180 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for libcares2 fixes the following issues: - Add patch to fix single byte out of buffer write (CVE-2016-5180, bsc#1007728) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-58=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-58=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libcares-devel-1.9.1-6.1 libcares2-1.9.1-6.1 libcares2-debuginfo-1.9.1-6.1 libcares2-debugsource-1.9.1-6.1 - openSUSE Leap 42.2 (x86_64): libcares2-32bit-1.9.1-6.1 libcares2-debuginfo-32bit-1.9.1-6.1 - openSUSE Leap 42.1 (i586 x86_64): libcares-devel-1.9.1-5.1 libcares2-1.9.1-5.1 libcares2-debuginfo-1.9.1-5.1 libcares2-debugsource-1.9.1-5.1 - openSUSE Leap 42.1 (x86_64): libcares2-32bit-1.9.1-5.1 libcares2-debuginfo-32bit-1.9.1-5.1 References: https://www.suse.com/security/cve/CVE-2016-5180.html https://bugzilla.suse.com/1007728

1 0

openSUSE-SU-2017:0081-1: moderate: Security update for php5
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for php5 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0081-1 Rating: moderate References: #1015187 #1015188 #1015189 Cross-References: CVE-2016-9933 CVE-2016-9934 CVE-2016-9935 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for php5 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-62=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-62=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php5-5.5.14-72.1 apache2-mod_php5-debuginfo-5.5.14-72.1 php5-5.5.14-72.1 php5-bcmath-5.5.14-72.1 php5-bcmath-debuginfo-5.5.14-72.1 php5-bz2-5.5.14-72.1 php5-bz2-debuginfo-5.5.14-72.1 php5-calendar-5.5.14-72.1 php5-calendar-debuginfo-5.5.14-72.1 php5-ctype-5.5.14-72.1 php5-ctype-debuginfo-5.5.14-72.1 php5-curl-5.5.14-72.1 php5-curl-debuginfo-5.5.14-72.1 php5-dba-5.5.14-72.1 php5-dba-debuginfo-5.5.14-72.1 php5-debuginfo-5.5.14-72.1 php5-debugsource-5.5.14-72.1 php5-devel-5.5.14-72.1 php5-dom-5.5.14-72.1 php5-dom-debuginfo-5.5.14-72.1 php5-enchant-5.5.14-72.1 php5-enchant-debuginfo-5.5.14-72.1 php5-exif-5.5.14-72.1 php5-exif-debuginfo-5.5.14-72.1 php5-fastcgi-5.5.14-72.1 php5-fastcgi-debuginfo-5.5.14-72.1 php5-fileinfo-5.5.14-72.1 php5-fileinfo-debuginfo-5.5.14-72.1 php5-firebird-5.5.14-72.1 php5-firebird-debuginfo-5.5.14-72.1 php5-fpm-5.5.14-72.1 php5-fpm-debuginfo-5.5.14-72.1 php5-ftp-5.5.14-72.1 php5-ftp-debuginfo-5.5.14-72.1 php5-gd-5.5.14-72.1 php5-gd-debuginfo-5.5.14-72.1 php5-gettext-5.5.14-72.1 php5-gettext-debuginfo-5.5.14-72.1 php5-gmp-5.5.14-72.1 php5-gmp-debuginfo-5.5.14-72.1 php5-iconv-5.5.14-72.1 php5-iconv-debuginfo-5.5.14-72.1 php5-imap-5.5.14-72.1 php5-imap-debuginfo-5.5.14-72.1 php5-intl-5.5.14-72.1 php5-intl-debuginfo-5.5.14-72.1 php5-json-5.5.14-72.1 php5-json-debuginfo-5.5.14-72.1 php5-ldap-5.5.14-72.1 php5-ldap-debuginfo-5.5.14-72.1 php5-mbstring-5.5.14-72.1 php5-mbstring-debuginfo-5.5.14-72.1 php5-mcrypt-5.5.14-72.1 php5-mcrypt-debuginfo-5.5.14-72.1 php5-mssql-5.5.14-72.1 php5-mssql-debuginfo-5.5.14-72.1 php5-mysql-5.5.14-72.1 php5-mysql-debuginfo-5.5.14-72.1 php5-odbc-5.5.14-72.1 php5-odbc-debuginfo-5.5.14-72.1 php5-opcache-5.5.14-72.1 php5-opcache-debuginfo-5.5.14-72.1 php5-openssl-5.5.14-72.1 php5-openssl-debuginfo-5.5.14-72.1 php5-pcntl-5.5.14-72.1 php5-pcntl-debuginfo-5.5.14-72.1 php5-pdo-5.5.14-72.1 php5-pdo-debuginfo-5.5.14-72.1 php5-pgsql-5.5.14-72.1 php5-pgsql-debuginfo-5.5.14-72.1 php5-phar-5.5.14-72.1 php5-phar-debuginfo-5.5.14-72.1 php5-posix-5.5.14-72.1 php5-posix-debuginfo-5.5.14-72.1 php5-pspell-5.5.14-72.1 php5-pspell-debuginfo-5.5.14-72.1 php5-readline-5.5.14-72.1 php5-readline-debuginfo-5.5.14-72.1 php5-shmop-5.5.14-72.1 php5-shmop-debuginfo-5.5.14-72.1 php5-snmp-5.5.14-72.1 php5-snmp-debuginfo-5.5.14-72.1 php5-soap-5.5.14-72.1 php5-soap-debuginfo-5.5.14-72.1 php5-sockets-5.5.14-72.1 php5-sockets-debuginfo-5.5.14-72.1 php5-sqlite-5.5.14-72.1 php5-sqlite-debuginfo-5.5.14-72.1 php5-suhosin-5.5.14-72.1 php5-suhosin-debuginfo-5.5.14-72.1 php5-sysvmsg-5.5.14-72.1 php5-sysvmsg-debuginfo-5.5.14-72.1 php5-sysvsem-5.5.14-72.1 php5-sysvsem-debuginfo-5.5.14-72.1 php5-sysvshm-5.5.14-72.1 php5-sysvshm-debuginfo-5.5.14-72.1 php5-tidy-5.5.14-72.1 php5-tidy-debuginfo-5.5.14-72.1 php5-tokenizer-5.5.14-72.1 php5-tokenizer-debuginfo-5.5.14-72.1 php5-wddx-5.5.14-72.1 php5-wddx-debuginfo-5.5.14-72.1 php5-xmlreader-5.5.14-72.1 php5-xmlreader-debuginfo-5.5.14-72.1 php5-xmlrpc-5.5.14-72.1 php5-xmlrpc-debuginfo-5.5.14-72.1 php5-xmlwriter-5.5.14-72.1 php5-xmlwriter-debuginfo-5.5.14-72.1 php5-xsl-5.5.14-72.1 php5-xsl-debuginfo-5.5.14-72.1 php5-zip-5.5.14-72.1 php5-zip-debuginfo-5.5.14-72.1 php5-zlib-5.5.14-72.1 php5-zlib-debuginfo-5.5.14-72.1 - openSUSE Leap 42.2 (noarch): php5-pear-5.5.14-72.1 - openSUSE Leap 42.1 (i586 x86_64): apache2-mod_php5-5.5.14-71.1 apache2-mod_php5-debuginfo-5.5.14-71.1 php5-5.5.14-71.1 php5-bcmath-5.5.14-71.1 php5-bcmath-debuginfo-5.5.14-71.1 php5-bz2-5.5.14-71.1 php5-bz2-debuginfo-5.5.14-71.1 php5-calendar-5.5.14-71.1 php5-calendar-debuginfo-5.5.14-71.1 php5-ctype-5.5.14-71.1 php5-ctype-debuginfo-5.5.14-71.1 php5-curl-5.5.14-71.1 php5-curl-debuginfo-5.5.14-71.1 php5-dba-5.5.14-71.1 php5-dba-debuginfo-5.5.14-71.1 php5-debuginfo-5.5.14-71.1 php5-debugsource-5.5.14-71.1 php5-devel-5.5.14-71.1 php5-dom-5.5.14-71.1 php5-dom-debuginfo-5.5.14-71.1 php5-enchant-5.5.14-71.1 php5-enchant-debuginfo-5.5.14-71.1 php5-exif-5.5.14-71.1 php5-exif-debuginfo-5.5.14-71.1 php5-fastcgi-5.5.14-71.1 php5-fastcgi-debuginfo-5.5.14-71.1 php5-fileinfo-5.5.14-71.1 php5-fileinfo-debuginfo-5.5.14-71.1 php5-firebird-5.5.14-71.1 php5-firebird-debuginfo-5.5.14-71.1 php5-fpm-5.5.14-71.1 php5-fpm-debuginfo-5.5.14-71.1 php5-ftp-5.5.14-71.1 php5-ftp-debuginfo-5.5.14-71.1 php5-gd-5.5.14-71.1 php5-gd-debuginfo-5.5.14-71.1 php5-gettext-5.5.14-71.1 php5-gettext-debuginfo-5.5.14-71.1 php5-gmp-5.5.14-71.1 php5-gmp-debuginfo-5.5.14-71.1 php5-iconv-5.5.14-71.1 php5-iconv-debuginfo-5.5.14-71.1 php5-imap-5.5.14-71.1 php5-imap-debuginfo-5.5.14-71.1 php5-intl-5.5.14-71.1 php5-intl-debuginfo-5.5.14-71.1 php5-json-5.5.14-71.1 php5-json-debuginfo-5.5.14-71.1 php5-ldap-5.5.14-71.1 php5-ldap-debuginfo-5.5.14-71.1 php5-mbstring-5.5.14-71.1 php5-mbstring-debuginfo-5.5.14-71.1 php5-mcrypt-5.5.14-71.1 php5-mcrypt-debuginfo-5.5.14-71.1 php5-mssql-5.5.14-71.1 php5-mssql-debuginfo-5.5.14-71.1 php5-mysql-5.5.14-71.1 php5-mysql-debuginfo-5.5.14-71.1 php5-odbc-5.5.14-71.1 php5-odbc-debuginfo-5.5.14-71.1 php5-opcache-5.5.14-71.1 php5-opcache-debuginfo-5.5.14-71.1 php5-openssl-5.5.14-71.1 php5-openssl-debuginfo-5.5.14-71.1 php5-pcntl-5.5.14-71.1 php5-pcntl-debuginfo-5.5.14-71.1 php5-pdo-5.5.14-71.1 php5-pdo-debuginfo-5.5.14-71.1 php5-pgsql-5.5.14-71.1 php5-pgsql-debuginfo-5.5.14-71.1 php5-phar-5.5.14-71.1 php5-phar-debuginfo-5.5.14-71.1 php5-posix-5.5.14-71.1 php5-posix-debuginfo-5.5.14-71.1 php5-pspell-5.5.14-71.1 php5-pspell-debuginfo-5.5.14-71.1 php5-readline-5.5.14-71.1 php5-readline-debuginfo-5.5.14-71.1 php5-shmop-5.5.14-71.1 php5-shmop-debuginfo-5.5.14-71.1 php5-snmp-5.5.14-71.1 php5-snmp-debuginfo-5.5.14-71.1 php5-soap-5.5.14-71.1 php5-soap-debuginfo-5.5.14-71.1 php5-sockets-5.5.14-71.1 php5-sockets-debuginfo-5.5.14-71.1 php5-sqlite-5.5.14-71.1 php5-sqlite-debuginfo-5.5.14-71.1 php5-suhosin-5.5.14-71.1 php5-suhosin-debuginfo-5.5.14-71.1 php5-sysvmsg-5.5.14-71.1 php5-sysvmsg-debuginfo-5.5.14-71.1 php5-sysvsem-5.5.14-71.1 php5-sysvsem-debuginfo-5.5.14-71.1 php5-sysvshm-5.5.14-71.1 php5-sysvshm-debuginfo-5.5.14-71.1 php5-tidy-5.5.14-71.1 php5-tidy-debuginfo-5.5.14-71.1 php5-tokenizer-5.5.14-71.1 php5-tokenizer-debuginfo-5.5.14-71.1 php5-wddx-5.5.14-71.1 php5-wddx-debuginfo-5.5.14-71.1 php5-xmlreader-5.5.14-71.1 php5-xmlreader-debuginfo-5.5.14-71.1 php5-xmlrpc-5.5.14-71.1 php5-xmlrpc-debuginfo-5.5.14-71.1 php5-xmlwriter-5.5.14-71.1 php5-xmlwriter-debuginfo-5.5.14-71.1 php5-xsl-5.5.14-71.1 php5-xsl-debuginfo-5.5.14-71.1 php5-zip-5.5.14-71.1 php5-zip-debuginfo-5.5.14-71.1 php5-zlib-5.5.14-71.1 php5-zlib-debuginfo-5.5.14-71.1 - openSUSE Leap 42.1 (noarch): php5-pear-5.5.14-71.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://www.suse.com/security/cve/CVE-2016-9934.html https://www.suse.com/security/cve/CVE-2016-9935.html https://bugzilla.suse.com/1015187 https://bugzilla.suse.com/1015188 https://bugzilla.suse.com/1015189

1 0

openSUSE-SU-2017:0080-1: moderate: Security update for zlib
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0080-1 Rating: moderate References: #1003577 #1003579 #1003580 #1013882 Cross-References: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for zlib fixes the following issues: - CVE-2016-9843: Big-endian out-of-bounds pointer - CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579) - Incompatible declarations for external linkage function deflate (bsc#1003577) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-46=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libminizip1-1.2.8-10.1 libminizip1-debuginfo-1.2.8-10.1 libz1-1.2.8-10.1 libz1-debuginfo-1.2.8-10.1 minizip-devel-1.2.8-10.1 zlib-debugsource-1.2.8-10.1 zlib-devel-1.2.8-10.1 zlib-devel-static-1.2.8-10.1 - openSUSE Leap 42.2 (x86_64): libz1-32bit-1.2.8-10.1 libz1-debuginfo-32bit-1.2.8-10.1 zlib-devel-32bit-1.2.8-10.1 zlib-devel-static-32bit-1.2.8-10.1 References: https://www.suse.com/security/cve/CVE-2016-9840.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2016-9842.html https://www.suse.com/security/cve/CVE-2016-9843.html https://bugzilla.suse.com/1003577 https://bugzilla.suse.com/1003579 https://bugzilla.suse.com/1003580 https://bugzilla.suse.com/1013882

1 0

openSUSE-RU-2017:0079-1: Recommended update for shibboleth-sp
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for shibboleth-sp ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0079-1 Rating: low References: #1014173 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update adds the memcache-store plugin to shibboleth-sp. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-50=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-50=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): libshibsp-lite6-2.5.5-4.1 libshibsp-lite6-debuginfo-2.5.5-4.1 libshibsp6-2.5.5-4.1 libshibsp6-debuginfo-2.5.5-4.1 shibboleth-sp-2.5.5-4.1 shibboleth-sp-debuginfo-2.5.5-4.1 shibboleth-sp-debugsource-2.5.5-4.1 shibboleth-sp-devel-2.5.5-4.1 - openSUSE Leap 42.1 (i586 x86_64): libshibsp-lite6-2.5.5-3.1 libshibsp-lite6-debuginfo-2.5.5-3.1 libshibsp6-2.5.5-3.1 libshibsp6-debuginfo-2.5.5-3.1 shibboleth-sp-2.5.5-3.1 shibboleth-sp-debuginfo-2.5.5-3.1 shibboleth-sp-debugsource-2.5.5-3.1 shibboleth-sp-devel-2.5.5-3.1 References: https://bugzilla.suse.com/1014173

1 0

openSUSE-RU-2017:0078-1: moderate: Recommended update for ipmitool
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for ipmitool ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0078-1 Rating: moderate References: #1011382 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for ipmitool provides the following fixes: - Fix dumping of the first two bytes of raw SDR data. - Fix interpretation of led states. - Fall back to IPv4 for IPMI v2 / RMCP+ sessions. - Add support for 13G Dell PowerEdge servers. - Implement DDR4 DIMM decoding logic. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-55=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ipmitool-1.8.13-13.1 ipmitool-debuginfo-1.8.13-13.1 ipmitool-debugsource-1.8.13-13.1 References: https://bugzilla.suse.com/1011382

1 0

openSUSE-SU-2017:0077-1: moderate: Security update for zlib
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for zlib ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0077-1 Rating: moderate References: #1003577 #1003579 #1003580 #1013882 Cross-References: CVE-2016-9840 CVE-2016-9841 CVE-2016-9842 CVE-2016-9843 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for zlib fixes the following issues: - CVE-2016-9843: Big-endian out-of-bounds pointer (bsc#1013882) - CVE-2016-9842: Undefined Left Shift of Negative Number (bsc#1003580) - CVE-2016-9840 CVE-2016-9841: Out-of-bounds pointer arithmetic in inftrees.c (bsc#1003579) - Incompatible declarations for external linkage function deflate (bsc#1003577) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-47=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libz1-1.2.8-8.1 libz1-debuginfo-1.2.8-8.1 zlib-debugsource-1.2.8-8.1 zlib-devel-1.2.8-8.1 zlib-devel-static-1.2.8-8.1 - openSUSE Leap 42.1 (x86_64): libz1-32bit-1.2.8-8.1 libz1-debuginfo-32bit-1.2.8-8.1 zlib-devel-32bit-1.2.8-8.1 zlib-devel-static-32bit-1.2.8-8.1 References: https://www.suse.com/security/cve/CVE-2016-9840.html https://www.suse.com/security/cve/CVE-2016-9841.html https://www.suse.com/security/cve/CVE-2016-9842.html https://www.suse.com/security/cve/CVE-2016-9843.html https://bugzilla.suse.com/1003577 https://bugzilla.suse.com/1003579 https://bugzilla.suse.com/1003580 https://bugzilla.suse.com/1013882

1 0

openSUSE-RU-2017:0076-1: Recommended update for hwinfo
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0076-1 Rating: low References: #1007172 #1010276 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for hwinfo provides the following fixes: - Look for smbios entry point also in EFI settings. (bsc#1010276) - Look for DMI table also in sysfs. (bsc#1010276) - Add permanent MAC address field for network cards. (bsc#1007172) - Ensure network devices have a bus_id. (bsc#1007172) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-41=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): hwinfo-21.38-6.1 hwinfo-debuginfo-21.38-6.1 hwinfo-debugsource-21.38-6.1 hwinfo-devel-21.38-6.1 hwinfo-devel-debuginfo-21.38-6.1 References: https://bugzilla.suse.com/1007172 https://bugzilla.suse.com/1010276

1 0

openSUSE-SU-2017:0075-1: moderate: Security update for gstreamer-0_10-plugins-bad
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0075-1 Rating: moderate References: #1010514 #1010829 Cross-References: CVE-2016-9445 CVE-2016-9446 CVE-2016-9447 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes three vulnerabilities is now available. Description: This update for gstreamer-0_10-plugins-bad fixes the following issues: - CVE-2016-9445, CVE-2016-9446: Protection against buffer overflows (bsc#1010829) - CVE-2016-9447: Disable the nsf plugin (bsc#1010514) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-64=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-0_10-plugins-bad-0.10.23-24.1 gstreamer-0_10-plugins-bad-debuginfo-0.10.23-24.1 gstreamer-0_10-plugins-bad-debugsource-0.10.23-24.1 gstreamer-0_10-plugins-bad-devel-0.10.23-24.1 gstreamer-0_10-plugins-bad-doc-0.10.23-24.1 libgstbasecamerabinsrc-0_10-23-0.10.23-24.1 libgstbasecamerabinsrc-0_10-23-debuginfo-0.10.23-24.1 libgstbasevideo-0_10-23-0.10.23-24.1 libgstbasevideo-0_10-23-debuginfo-0.10.23-24.1 libgstcodecparsers-0_10-23-0.10.23-24.1 libgstcodecparsers-0_10-23-debuginfo-0.10.23-24.1 libgstphotography-0_10-23-0.10.23-24.1 libgstphotography-0_10-23-debuginfo-0.10.23-24.1 libgstsignalprocessor-0_10-23-0.10.23-24.1 libgstsignalprocessor-0_10-23-debuginfo-0.10.23-24.1 libgstvdp-0_10-23-0.10.23-24.1 libgstvdp-0_10-23-debuginfo-0.10.23-24.1 - openSUSE Leap 42.2 (x86_64): gstreamer-0_10-plugins-bad-32bit-0.10.23-24.1 gstreamer-0_10-plugins-bad-debuginfo-32bit-0.10.23-24.1 libgstbasecamerabinsrc-0_10-23-32bit-0.10.23-24.1 libgstbasecamerabinsrc-0_10-23-debuginfo-32bit-0.10.23-24.1 libgstbasevideo-0_10-23-32bit-0.10.23-24.1 libgstbasevideo-0_10-23-debuginfo-32bit-0.10.23-24.1 libgstcodecparsers-0_10-23-32bit-0.10.23-24.1 libgstcodecparsers-0_10-23-debuginfo-32bit-0.10.23-24.1 libgstphotography-0_10-23-32bit-0.10.23-24.1 libgstphotography-0_10-23-debuginfo-32bit-0.10.23-24.1 libgstsignalprocessor-0_10-23-32bit-0.10.23-24.1 libgstsignalprocessor-0_10-23-debuginfo-32bit-0.10.23-24.1 libgstvdp-0_10-23-32bit-0.10.23-24.1 libgstvdp-0_10-23-debuginfo-32bit-0.10.23-24.1 - openSUSE Leap 42.2 (noarch): gstreamer-0_10-plugins-bad-lang-0.10.23-24.1 References: https://www.suse.com/security/cve/CVE-2016-9445.html https://www.suse.com/security/cve/CVE-2016-9446.html https://www.suse.com/security/cve/CVE-2016-9447.html https://bugzilla.suse.com/1010514 https://bugzilla.suse.com/1010829

1 0

openSUSE-SU-2017:0074-1: moderate: Security update for tiff
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for tiff ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0074-1 Rating: moderate References: #1007280 #1010161 #1010163 #1011103 #1011107 #914890 #974449 #974840 #984813 #984815 #987351 Cross-References: CVE-2014-8127 CVE-2016-3622 CVE-2016-3658 CVE-2016-5321 CVE-2016-5323 CVE-2016-5652 CVE-2016-5875 CVE-2016-9273 CVE-2016-9297 CVE-2016-9448 CVE-2016-9453 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 11 vulnerabilities is now available. Description: The tiff library and tools were updated to version 4.0.7 fixing various bug and security issues. - CVE-2014-8127: out-of-bounds read with malformed TIFF image in multiple tools [bnc#914890] - CVE-2016-9297: tif_dirread.c read outside buffer in _TIFFPrintField() [bnc#1010161] - CVE-2016-3658: Illegal read in TIFFWriteDirectoryTagLongLong8Array function in tiffset / tif_dirwrite.c [bnc#974840] - CVE-2016-9273: heap overflow [bnc#1010163] - CVE-2016-3622: divide By Zero in the tiff2rgba tool [bnc#974449] - CVE-2016-5652: tiff2pdf JPEG Compression Tables Heap Buffer Overflow [bnc#1007280] - CVE-2016-9453: out-of-bounds Write memcpy and less bound check in tiff2pdf [bnc#1011107] - CVE-2016-5875: heap-based buffer overflow when using the PixarLog compressionformat [bnc#987351] - CVE-2016-9448: regression introduced by fixing CVE-2016-9297 [bnc#1011103] - CVE-2016-5321: out-of-bounds read in tiffcrop / DumpModeDecode() function [bnc#984813] - CVE-2016-5323: Divide-by-zero in _TIFFFax3fillruns() function (null ptr dereference?) [bnc#984815] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-53=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-53=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libtiff-devel-4.0.7-12.1 libtiff5-4.0.7-12.1 libtiff5-debuginfo-4.0.7-12.1 tiff-4.0.7-12.1 tiff-debuginfo-4.0.7-12.1 tiff-debugsource-4.0.7-12.1 - openSUSE Leap 42.2 (x86_64): libtiff-devel-32bit-4.0.7-12.1 libtiff5-32bit-4.0.7-12.1 libtiff5-debuginfo-32bit-4.0.7-12.1 - openSUSE Leap 42.1 (i586 x86_64): libtiff-devel-4.0.7-12.1 libtiff5-4.0.7-12.1 libtiff5-debuginfo-4.0.7-12.1 tiff-4.0.7-12.1 tiff-debuginfo-4.0.7-12.1 tiff-debugsource-4.0.7-12.1 - openSUSE Leap 42.1 (x86_64): libtiff-devel-32bit-4.0.7-12.1 libtiff5-32bit-4.0.7-12.1 libtiff5-debuginfo-32bit-4.0.7-12.1 References: https://www.suse.com/security/cve/CVE-2014-8127.html https://www.suse.com/security/cve/CVE-2016-3622.html https://www.suse.com/security/cve/CVE-2016-3658.html https://www.suse.com/security/cve/CVE-2016-5321.html https://www.suse.com/security/cve/CVE-2016-5323.html https://www.suse.com/security/cve/CVE-2016-5652.html https://www.suse.com/security/cve/CVE-2016-5875.html https://www.suse.com/security/cve/CVE-2016-9273.html https://www.suse.com/security/cve/CVE-2016-9297.html https://www.suse.com/security/cve/CVE-2016-9448.html https://www.suse.com/security/cve/CVE-2016-9453.html https://bugzilla.suse.com/1007280 https://bugzilla.suse.com/1010161 https://bugzilla.suse.com/1010163 https://bugzilla.suse.com/1011103 https://bugzilla.suse.com/1011107 https://bugzilla.suse.com/914890 https://bugzilla.suse.com/974449 https://bugzilla.suse.com/974840 https://bugzilla.suse.com/984813 https://bugzilla.suse.com/984815 https://bugzilla.suse.com/987351

1 0

openSUSE-RU-2017:0073-1: Recommended update for calibre
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0073-1 Rating: low References: Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for calibre fixes the following issues: - the version was updated to 2.75.1 to get some kobo driver updates, especially support for the latest Kobo firmware version 4.2. - update to 2.75.1: fixes regressions introduces in 2.75.0 - update to 2.75.0 New Features - Add support for new Kobo firmware version 4.2 - Allow using amazon_in, amazon_au, amazon_com identifiers in the Book details panel. Bug Fixes - Kobo driver: Fix incorrectly sized covers being sent to some Kobo devices - E-book viewer: Prevent javascript in the book from accessing files on the computer using XMLHttpRequest. - Edit Book: Fix the 'Search ignoring markup tool' not ignoring comments/processing instructions, etc. - CSS Transforms: Fix 'is'/'is not' rules not matching currentColor. - E-book viewer: Make the swipe up gesture move to next section instead of previous section. - Edit Book: Allow the Spell Check dialog and the search panel to be made much narrower than before. - Edit Book: Fix customize template window not freely resizable on windows. - Edit Book: Fix newlines not being matched by the 'Search ignoring markup' tool. - EPUB Input: Fix incorrect handling of html files that are in a folder above the OPF file. - Update to 2.74.0: New Features - Amazon metadata download: Allow downloading from amazon.cn as well. To use go to Preferences->Metadata download and customize the amazon plugin to download from amazon.cn - Edit Book: Allow disabling the 'Files already arranged into folders' message popup Bug Fixes - Edit Book: Fix selected text not being fully highlighted when using the solarized color schemes. - calibredb: Fix CSV output for the check_library command not being properly escaped - Fix subsetting of fonts whose names start with 'and' not working - Fix a regression in 2.72 that broke the --start-in-tray command line option. - Fix third party plugins that create dynamic context menus not working in linux - DOCX Input: Fix images wider than 50% of the page width being incorrectly right aligned even when anchored to the center of the page. - Catalog generation: Ensure all citation keys in BiBTeX catalogs have only ascii characters. - Get Books: Update ebookpoint and legimi plugins for website changes - EPUB3 metadata: Ensure updating metadata never produces empty dc:contributor elements. - DOCX Output: Fix an error when converting tables with spanning cells. - Nicer error message if the user tries to import data while the content server is running - Update to 2.73.0: New Features - Add a preference in Preferences->Look & Feel to hide the row numbers in the main book list. - Allow Export/Import of column coloring and icon rules. - Edit Book: Allow bulk changing of file extension for selected files by right clicking ont he selected files in the file browser. - Edit Book: Check Book: Add a check for nav documents that contain no ToC in EPUB 3 books - Edit Book: Check Book: Add a test to check if the embedded fonts in the book have their embedding permissions enabled Bug Fixes - Pressing the up arrow in an date edit with undefined value should jump to the current date rather than Feb 101 - EPUB Input: When an invalid nav based ToC is used in an EPUB 3.0 document that also has a fallback NCX ToC, use the fallback ToC. - Fix a regression that broke the icon theme creation tool in the previous release - Fix insert character dialog not reflowing characters on resize. Also only allow the search bar in the dialog to get input focus - update to 2.72.0 New Features - Font embedding: Implement automatic embedding for fonts with non-normal stretch and weight values such as Condensed/Light/Extra Bold fonts - Allow aborting an in-progress Copy-to-library action. - Edit Book: When adding a font file via File->New automatically generate the appropriate @font-face rule and copy it to the clipboard so that it can be easily inserted into the appropriate CSS files. - Edit Book: Check Book: Add a warning for links with the : character in them on windows - Conversion: When converting markdown documents recognize basic metadata in the markdown document formatted as per the markdown metadata extension. - Edit Book: Spell Check dialog: Various small usability enhancements -- preserve position in word list on refresh, ensure that new current word is highlighted after changing a word, etc. - Edit Book: Flash the taskbar icon after beautify all files completes. Bug Fixes - Fix creating an empty library with the same structure as current library not creating custom columns on the first restart after creating the new custom columns. - Edit Book: Dont fail to rename files on windows if there is a link containing the colon character. - PDF Output: Dont fail if one of the embedded fonts has no names - Edit Book: When downloading external resources, ensure the generated filenames are valid. - Windows: Fix file extension not being added automatically when missing in save dialogs. - Fix calibre not opening full-screen in windows tablet mode. - Edit Book: Fix check external links tool not detecting changes that have not yet been saved - Generate covers: Fix & in the series causing incorrect formatting of series number. - Edit Book: Fix a regression in the last release that broke the Arrange into folders tool when arranging into sub-folders of a folder that does not exist. - Update to 2.71.0: New Features - calibre's tenth birthday edition! - A new set of icons for calibre - A short video commemorating the occasion: https://youtu.be/Q95NfFKc0v8 - Book details panel: Add a copy all action to the right click menu. Bug Fixes - Get Books: Update ebookpoint and woblink store plugins for website changes - Edit Book: When un-marking text auto-change the 'search where' location to what it was before text was marked rather than 'current file'. - Automatic adding: Show an error if the user specifies a folder whose name starts with a dot or underscore. - OS X: Fix a regression that caused incorrect display of the icon in pop-up message boxes when using a Retina display. - Kobo driver: Fix an error when migrating very old settings - Kobo driver: Fix a regression that broke handling of reading status for devices running old 1.9x versions of the Kobo firmware - Edit Book: When using the arrange into folders tool do not change the case of already existing folders in the book. - Update to version 2.70.0: New Features - Edit Book: Add a tool to download external resources (images/stylesheets/etc.) that are not included in the book. - Make custom columns available in the Alter Tag Browser->Manage categories sub menu Bug Fixes - Conversion: Fix incorrect resolution of references to resources in HTML files that exist in a folder level above the OPF file. This could lead to styles being incorrectly processed in such HTML files. - Get Books: Update the amazon store plugins for website changes - Update ozon.ru metadata download plugin to fix searching for books by ISBN - Edit Book: Fix a regression in the previous release that broke the preferences dialog for changing color schemes. - Edit Book: Better error message when user tries to open a Check Book item that refers to a file that has been deleted since the last time Check Book was run. - Update to 2.69.0: New Features - Kobo driver: Support for firmware version 4.1 and Overdrive books on the device - Edit Book: Highlight class names inside HTML tags - Bulk metadata edit dialog: Allow search & replace to work for ratings columns as well. Bug Fixes - Fix downloading of metadata from ozon.ru, which broke due to website changes - Kobo driver: Fix delete of empty collections - Kobo driver: Fix book previews being sometimes detected as actual books - Cover Browser: Fix setting an empty template for the title causes an error - Edit Book: On windows do not trigger shortcuts when using the right Alt (AltGr) key. This allows it to be used for entering special characters instead. - Edit Book: Auto-add file extension when using the Save a Copy dialog if it is missing. - Linux: Fix calibre not launching when used with some old VNC server implementations - Fix some news downloads in east asian languages not working because the truncation of article descriptions could cause invalid UTF-16 bytes in the string - Fix incorrect timezone when editing custom date columns directly in the book list - Update to 2.68.0: New Features - Add a tweak to Preferences->Tweaks to control the list of servers calibre considers public email servers Bug Fixes - Content server: Fix a regression in the previous release that broke the OPDS feeds for libraries with no custom columns - Edit metadata dialog: Fix auto-generation/validation of author sort values not working when only changing case of the author name. - A nicer error message when calibre fails to create the temporary directory. - Fix dates being set to empty in bulk search/replace not becoming UNDEFINED - Edit metadata dialog: Make pressing up on an undefined numeric field set the value to zero instead of -99999. - Conversion: Handle corrupted JPEG files that have valid headers but invalid data. - Conversion: Improve detection of input documents that use uppercase tag/attribute names. - Fix regression in previous release that caused incorrect display of ratings in the side panel of the metadata download dialog - Get Books: Update publio and virtualo store plugins for website changes - Fix reading metadata from PDF files broken by poppler >= 0.47.0 - Change the application name set in Qt to calibre from libprs500 Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-49=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): calibre-2.75.1-27.1 calibre-debuginfo-2.75.1-27.1 calibre-debugsource-2.75.1-27.1 References:

1 0

openSUSE-SU-2017:0072-1: moderate: Security update for gstreamer-plugins-bad
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for gstreamer-plugins-bad ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0072-1 Rating: moderate References: #1010829 #1013659 #1013678 #1013680 Cross-References: CVE-2016-9445 CVE-2016-9446 CVE-2016-9809 CVE-2016-9812 CVE-2016-9813 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 5 vulnerabilities is now available. Description: This update for gstreamer-plugins-bad fixes the following security issues, which would allow attackers able to submit media files for indexing to cause code execution or crashes: - Check an integer overflow (CVE-2016-9445) and initialize a buffer (CVE-2016-9446) in vmncdec. (bsc#1010829) - CVE-2016-9809: Ensure codec_data has the right size when reading number of SPS (bsc#1013659). - CVE-2016-9812: Add more section size checks (bsc#1013678). - CVE-2016-9813: fix PAT parsing (bsc#1013680). This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-63=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-bad-1.8.3-3.1 gstreamer-plugins-bad-debuginfo-1.8.3-3.1 gstreamer-plugins-bad-debugsource-1.8.3-3.1 gstreamer-plugins-bad-devel-1.8.3-3.1 gstreamer-plugins-bad-doc-1.8.3-3.1 libgstadaptivedemux-1_0-0-1.8.3-3.1 libgstadaptivedemux-1_0-0-debuginfo-1.8.3-3.1 libgstbadaudio-1_0-0-1.8.3-3.1 libgstbadaudio-1_0-0-debuginfo-1.8.3-3.1 libgstbadbase-1_0-0-1.8.3-3.1 libgstbadbase-1_0-0-debuginfo-1.8.3-3.1 libgstbadvideo-1_0-0-1.8.3-3.1 libgstbadvideo-1_0-0-debuginfo-1.8.3-3.1 libgstbasecamerabinsrc-1_0-0-1.8.3-3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-1.8.3-3.1 libgstcodecparsers-1_0-0-1.8.3-3.1 libgstcodecparsers-1_0-0-debuginfo-1.8.3-3.1 libgstgl-1_0-0-1.8.3-3.1 libgstgl-1_0-0-debuginfo-1.8.3-3.1 libgstinsertbin-1_0-0-1.8.3-3.1 libgstinsertbin-1_0-0-debuginfo-1.8.3-3.1 libgstmpegts-1_0-0-1.8.3-3.1 libgstmpegts-1_0-0-debuginfo-1.8.3-3.1 libgstphotography-1_0-0-1.8.3-3.1 libgstphotography-1_0-0-debuginfo-1.8.3-3.1 libgstplayer-1_0-0-1.8.3-3.1 libgstplayer-1_0-0-debuginfo-1.8.3-3.1 libgsturidownloader-1_0-0-1.8.3-3.1 libgsturidownloader-1_0-0-debuginfo-1.8.3-3.1 libgstvdpau-1.8.3-3.1 libgstvdpau-debuginfo-1.8.3-3.1 libgstwayland-1_0-0-1.8.3-3.1 libgstwayland-1_0-0-debuginfo-1.8.3-3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-bad-32bit-1.8.3-3.1 gstreamer-plugins-bad-debuginfo-32bit-1.8.3-3.1 libgstadaptivedemux-1_0-0-32bit-1.8.3-3.1 libgstadaptivedemux-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstbadaudio-1_0-0-32bit-1.8.3-3.1 libgstbadaudio-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstbadbase-1_0-0-32bit-1.8.3-3.1 libgstbadbase-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstbadvideo-1_0-0-32bit-1.8.3-3.1 libgstbadvideo-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstbasecamerabinsrc-1_0-0-32bit-1.8.3-3.1 libgstbasecamerabinsrc-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstcodecparsers-1_0-0-32bit-1.8.3-3.1 libgstcodecparsers-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstgl-1_0-0-32bit-1.8.3-3.1 libgstgl-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstinsertbin-1_0-0-32bit-1.8.3-3.1 libgstinsertbin-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstmpegts-1_0-0-32bit-1.8.3-3.1 libgstmpegts-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstphotography-1_0-0-32bit-1.8.3-3.1 libgstphotography-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstplayer-1_0-0-32bit-1.8.3-3.1 libgstplayer-1_0-0-debuginfo-32bit-1.8.3-3.1 libgsturidownloader-1_0-0-32bit-1.8.3-3.1 libgsturidownloader-1_0-0-debuginfo-32bit-1.8.3-3.1 libgstvdpau-32bit-1.8.3-3.1 libgstvdpau-debuginfo-32bit-1.8.3-3.1 libgstwayland-1_0-0-32bit-1.8.3-3.1 libgstwayland-1_0-0-debuginfo-32bit-1.8.3-3.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-bad-lang-1.8.3-3.1 References: https://www.suse.com/security/cve/CVE-2016-9445.html https://www.suse.com/security/cve/CVE-2016-9446.html https://www.suse.com/security/cve/CVE-2016-9809.html https://www.suse.com/security/cve/CVE-2016-9812.html https://www.suse.com/security/cve/CVE-2016-9813.html https://bugzilla.suse.com/1010829 https://bugzilla.suse.com/1013659 https://bugzilla.suse.com/1013678 https://bugzilla.suse.com/1013680

1 0

openSUSE-SU-2017:0071-1: important: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0071-1 Rating: important References: #1012102 #1012103 #1012104 #1013653 #1013655 #1013663 Cross-References: CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following security issues: - CVE-2016-9807: Flic decoder invalid read could lead to crash. (bsc#1013655) - CVE-2016-9634: Flic out-of-bounds write could lead to code execution. (bsc#1012102) - CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012103) - CVE-2016-9635: Flic out-of-bounds write could lead to code execution. (bsc#1012104) - CVE-2016-9808: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013653) - CVE-2016-9810: A maliciously crafted flic file can still cause invalid memory accesses. (bsc#1013663) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-65=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): gstreamer-plugins-good-1.8.3-3.1 gstreamer-plugins-good-debuginfo-1.8.3-3.1 gstreamer-plugins-good-debugsource-1.8.3-3.1 gstreamer-plugins-good-doc-1.8.3-3.1 gstreamer-plugins-good-extra-1.8.3-3.1 gstreamer-plugins-good-extra-debuginfo-1.8.3-3.1 - openSUSE Leap 42.2 (x86_64): gstreamer-plugins-good-32bit-1.8.3-3.1 gstreamer-plugins-good-debuginfo-32bit-1.8.3-3.1 gstreamer-plugins-good-extra-32bit-1.8.3-3.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.8.3-3.1 - openSUSE Leap 42.2 (noarch): gstreamer-plugins-good-lang-1.8.3-3.1 References: https://www.suse.com/security/cve/CVE-2016-9634.html https://www.suse.com/security/cve/CVE-2016-9635.html https://www.suse.com/security/cve/CVE-2016-9636.html https://www.suse.com/security/cve/CVE-2016-9807.html https://www.suse.com/security/cve/CVE-2016-9808.html https://www.suse.com/security/cve/CVE-2016-9810.html https://bugzilla.suse.com/1012102 https://bugzilla.suse.com/1012103 https://bugzilla.suse.com/1012104 https://bugzilla.suse.com/1013653 https://bugzilla.suse.com/1013655 https://bugzilla.suse.com/1013663

1 0

openSUSE-RU-2017:0070-1: Recommended update for hwinfo
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for hwinfo ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0070-1 Rating: low References: #1005428 #1006818 #1007172 #1010276 #970111 #996183 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 6 recommended fixes can now be installed. Description: This update for hwinfo provides the following fixes: - Look for SMBIOS entry point also in EFI settings. (bsc#1010276) - Look for DMI table also in sysfs. (bsc#1010276) - Add permanent mac address field for network cards. (bsc#1007172) - Ensure network devices have a bus_id. (bsc#1007172) - Update PCI and USB IDs. (bsc#1006818) - Implement nvdimm support. (bsc#970111) - Fix detection of USB controllers on aarch64 systems. (bsc#1005428) - Add support for mmc/sdio devices. (bsc#996183) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-52=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): hwinfo-21.38-9.1 hwinfo-debuginfo-21.38-9.1 hwinfo-debugsource-21.38-9.1 hwinfo-devel-21.38-9.1 hwinfo-devel-debuginfo-21.38-9.1 References: https://bugzilla.suse.com/1005428 https://bugzilla.suse.com/1006818 https://bugzilla.suse.com/1007172 https://bugzilla.suse.com/1010276 https://bugzilla.suse.com/970111 https://bugzilla.suse.com/996183

1 0

openSUSE-RU-2017:0069-1: moderate: Recommended update for rubygem-excon
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for rubygem-excon ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0069-1 Rating: moderate References: #1015107 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for rubygem-excon fixes the following issues: - yast2 docker would fail with error (bsc#1015107) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-56=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-56=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ruby2.1-rubygem-excon-0.54.0-7.1 ruby2.1-rubygem-excon-doc-0.54.0-7.1 ruby2.1-rubygem-excon-testsuite-0.54.0-7.1 - openSUSE Leap 42.1 (i586 x86_64): ruby2.1-rubygem-excon-0.54.0-6.1 ruby2.1-rubygem-excon-doc-0.54.0-6.1 ruby2.1-rubygem-excon-testsuite-0.54.0-6.1 References: https://bugzilla.suse.com/1015107

1 0

openSUSE-RU-2017:0068-1: moderate: Recommended update for resource-agents
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for resource-agents ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0068-1 Rating: moderate References: #1005424 #1007142 #994519 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for resource-agents fixes the following issues: - Fix sapdb.sh to work with HANA Multi-Tenant databases. (bsc#1007142, bsc#994519) - Add support for Oracle 12c monprofile. (bsc#1005424) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-44=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): ldirectord-3.9.6+git.1442374860.7f3628a-16.1 monitoring-plugins-metadata-3.9.6+git.1442374860.7f3628a-16.1 resource-agents-3.9.6+git.1442374860.7f3628a-16.1 resource-agents-debuginfo-3.9.6+git.1442374860.7f3628a-16.1 resource-agents-debugsource-3.9.6+git.1442374860.7f3628a-16.1 References: https://bugzilla.suse.com/1005424 https://bugzilla.suse.com/1007142 https://bugzilla.suse.com/994519

1 0

openSUSE-RU-2017:0067-1: important: Recommended update for libvirt
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0067-1 Rating: important References: #1001698 #1005288 #1017189 #956298 #996020 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for libvirt fixes the following issues: - libxl: support VIR_MIGRATE_PERSIST_DEST migration flag and advertise support for migration V3 (boo#996020) - libxl: fix handling of credit scheduler weight parameter (boo#1001698) - xenconfig: fix libvirtd segfault in virConnectDomainXMLToNative (boo#956298) - libxl: fix leaking of migration ports (boo#1005288) - Add support for VirtualBox 5 (boo#1017189) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-60=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): libvirt-1.2.18.4-20.1 libvirt-client-1.2.18.4-20.1 libvirt-client-debuginfo-1.2.18.4-20.1 libvirt-daemon-1.2.18.4-20.1 libvirt-daemon-config-network-1.2.18.4-20.1 libvirt-daemon-config-nwfilter-1.2.18.4-20.1 libvirt-daemon-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-interface-1.2.18.4-20.1 libvirt-daemon-driver-interface-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-lxc-1.2.18.4-20.1 libvirt-daemon-driver-lxc-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-network-1.2.18.4-20.1 libvirt-daemon-driver-network-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-nodedev-1.2.18.4-20.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-nwfilter-1.2.18.4-20.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-qemu-1.2.18.4-20.1 libvirt-daemon-driver-qemu-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-secret-1.2.18.4-20.1 libvirt-daemon-driver-secret-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-storage-1.2.18.4-20.1 libvirt-daemon-driver-storage-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-uml-1.2.18.4-20.1 libvirt-daemon-driver-uml-debuginfo-1.2.18.4-20.1 libvirt-daemon-driver-vbox-1.2.18.4-20.1 libvirt-daemon-driver-vbox-debuginfo-1.2.18.4-20.1 libvirt-daemon-lxc-1.2.18.4-20.1 libvirt-daemon-qemu-1.2.18.4-20.1 libvirt-daemon-uml-1.2.18.4-20.1 libvirt-daemon-vbox-1.2.18.4-20.1 libvirt-debugsource-1.2.18.4-20.1 libvirt-devel-1.2.18.4-20.1 libvirt-doc-1.2.18.4-20.1 libvirt-lock-sanlock-1.2.18.4-20.1 libvirt-lock-sanlock-debuginfo-1.2.18.4-20.1 libvirt-login-shell-1.2.18.4-20.1 libvirt-login-shell-debuginfo-1.2.18.4-20.1 - openSUSE Leap 42.1 (x86_64): libvirt-client-32bit-1.2.18.4-20.1 libvirt-client-debuginfo-32bit-1.2.18.4-20.1 libvirt-daemon-driver-libxl-1.2.18.4-20.1 libvirt-daemon-driver-libxl-debuginfo-1.2.18.4-20.1 libvirt-daemon-xen-1.2.18.4-20.1 libvirt-devel-32bit-1.2.18.4-20.1 References: https://bugzilla.suse.com/1001698 https://bugzilla.suse.com/1005288 https://bugzilla.suse.com/1017189 https://bugzilla.suse.com/956298 https://bugzilla.suse.com/996020

1 0

openSUSE-OU-2017:0066-1: moderate: Optional update for spec-cleaner
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Optional Update: Optional update for spec-cleaner ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0066-1 Rating: moderate References: #1017658 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has one optional fix can now be installed. Description: Spec-cleaner was updated to 0.9.1 to deliver various improvements. This version switches from a regular expression macro detection to full-blown parser to avoid bugs (bsc#1017658) Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-48=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-48=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-48=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spec-cleaner-0.9.1-23.1 spec-cleaner-format_spec_file-0.9.1-23.1 - openSUSE Leap 42.1 (noarch): spec-cleaner-0.9.1-23.1 spec-cleaner-format_spec_file-0.9.1-23.1 - openSUSE 13.2 (noarch): spec-cleaner-0.9.1-45.1 spec-cleaner-format_spec_file-0.9.1-45.1 References: https://bugzilla.suse.com/1017658

1 0

openSUSE-RU-2017:0065-1: moderate: Recommended update for emacs
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for emacs ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0065-1 Rating: moderate References: #1013572 #1013849 #967260 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for emacs fixes the following issues: - Icons toolbar missing with newer versions of GTK. (bsc#1013849) - Segmentation fault when saving files. (bsc#967260, bsc#1013572) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-45=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-45=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): emacs-24.3-22.1 emacs-debuginfo-24.3-22.1 emacs-debugsource-24.3-22.1 emacs-nox-24.3-22.1 emacs-nox-debuginfo-24.3-22.1 emacs-x11-24.3-22.1 emacs-x11-debuginfo-24.3-22.1 etags-24.3-22.1 etags-debuginfo-24.3-22.1 - openSUSE Leap 42.2 (noarch): emacs-el-24.3-22.1 emacs-info-24.3-22.1 - openSUSE Leap 42.1 (i586 x86_64): emacs-24.3-23.1 emacs-debuginfo-24.3-23.1 emacs-debugsource-24.3-23.1 emacs-nox-24.3-23.1 emacs-nox-debuginfo-24.3-23.1 emacs-x11-24.3-23.1 emacs-x11-debuginfo-24.3-23.1 etags-24.3-23.1 etags-debuginfo-24.3-23.1 - openSUSE Leap 42.1 (noarch): emacs-el-24.3-23.1 emacs-info-24.3-23.1 References: https://bugzilla.suse.com/1013572 https://bugzilla.suse.com/1013849 https://bugzilla.suse.com/967260

1 0

openSUSE-OU-2017:0064-1: moderate: Optional update for gdata-sharp
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Optional Update: Optional update for gdata-sharp ______________________________________________________________________________ Announcement ID: openSUSE-OU-2017:0064-1 Rating: moderate References: Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 0 optional fixes can now be installed. Description: This update for gdata-sharp fixes build failure with Mono/.NET 4.5. The package now relies on pkg-config to provide the right information to link nunit. The update also adds a -devel package. Patch Instructions: To install this openSUSE Optional Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-51=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-51=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): gdata-sharp-1.4.0.2-28.1 gdata-sharp-devel-1.4.0.2-28.1 - openSUSE Leap 42.1 (noarch): gdata-sharp-1.4.0.2-27.1 gdata-sharp-devel-1.4.0.2-27.1 References:

1 0

openSUSE-RU-2017:0063-1: moderate: Recommended update for aws-cli, python-boto3, python-botocore
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for aws-cli, python-boto3, python-botocore ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0063-1 Rating: moderate References: #1015776 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for aws-cli, python-boto3, python-botocore provides many fixes and enhancements. For a comprehensive list of changes please refer to the packages' change log. aws-cli (update to version 1.11.29): - cloudfront: Add lambda function associations to cache behaviors. - rds: Add cluster create data to DBCluster APIs. - opsworks: Fix an issue with opsworks register --local and python3. - waf-regional: Customers can use AWS WAF directly on Application Load Balancers in a VPC within available regions to protect their web sites and services from malicious attacks such as SQL injection, Cross Site Scripting, bad bots, etc. - opsworks-cm: Rename opsworkscm to opsworks-cm, keeping support for opsworkscm. - alias: Add ability to alias commands in the CLI. - --generate-cli-skeleton output: Add support for generating sample output for command. - cloudformation deploy: Add command to simplify deployments of cloudformation stack changes. - cloudformation package: Add command to package source code for cloudfromation template. - cloudtrail: Use STS instead of IAM in CreateSubscription. - --region: Add support for us-east-2. - s3: Display transfer speed for s3 commands. - s3: Port mv to s3transfer. - s3: Fix regression where "sync --delete" would not delete local files. - s3: Integrate sync command with s3transfer. - s3: Output progress even when discovering new files to transfer. - s3: Refactor rb into its own command. In addition, validate that no key is supplied regardless of whether or not the force argument is supplied. - s3: Fix regression when downloading empty files. - s3: Port cp and rm to s3transfer. Improve progress for those commands, showing byte progress. - pagination: Fix validation error when providing --no-paginate with normalized paging argument. - route53domains: Rename --end to --end-time to fix a bug relating to argparse prefix expansion. Alias --start to --start-time to maintain a consistent interface while keeping the old parameter. python-botocore (update to version 1.4.86): - cloudfront: Add lambda function associations to cache behaviors. - rds: Add cluster create data to DBCluster APIs. - waf-regional: Customers can use AWS WAF directly on Application Load Balancers in a VPC within available regions to protect their web sites and services from malicious attacks such as SQL injection, Cross Site Scripting, bad bots, etc. - health: Add paginators for Health. - Exceptions: Allow parsing of json error responses with non-json bodies. - opsworks-cm: Added waiter for Opsworks CM. - parameter: Automatically inject an idempotency token into parameters marked with the idempotencyToken trait. - s3: Fix presigned s3v4 URL bug related to blank query parameters being filtered incorrectly. - Presigner: Support presigning rest-json services. - Loader: Support loading json extra files. - Paginator: Add paginators for AWS WAF. - Parsers: ResponseMetadata will now always be populated, provided the response was able to be parsed into a dict. - Stub: Made ANY usable for nested parameters. python-boto3 (update to version 1.4.2) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-39=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-39=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): aws-cli-1.11.29-9.1 python-boto3-1.4.2-6.1 python-botocore-1.4.86-6.1 - openSUSE Leap 42.1 (noarch): aws-cli-1.11.29-9.1 python-boto3-1.4.2-9.1 python-botocore-1.4.86-16.1 References: https://bugzilla.suse.com/1015776

1 0

openSUSE-RU-2017:0062-1: Recommended update for calibre
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for calibre ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0062-1 Rating: low References: Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 0 recommended fixes can now be installed. Description: This update for calibre fixes the following issues: - the version was updated to 2.75.1 to get some kobo driver updates, especially support for the latest Kobo firmware version 4.2. - update to 2.75.1: fixes regressions introduces in 2.75.0 - update to 2.75.0 New Features - Add support for new Kobo firmware version 4.2 - Allow using amazon_in, amazon_au, amazon_com identifiers in the Book details panel. Bug Fixes - Kobo driver: Fix incorrectly sized covers being sent to some Kobo devices - E-book viewer: Prevent javascript in the book from accessing files on the computer using XMLHttpRequest. - Edit Book: Fix the 'Search ignoring markup tool' not ignoring comments/processing instructions, etc. - CSS Transforms: Fix 'is'/'is not' rules not matching currentColor. - E-book viewer: Make the swipe up gesture move to next section instead of previous section. - Edit Book: Allow the Spell Check dialog and the search panel to be made much narrower than before. - Edit Book: Fix customize template window not freely resizable on windows. - Edit Book: Fix newlines not being matched by the 'Search ignoring markup' tool. - EPUB Input: Fix incorrect handling of html files that are in a folder above the OPF file. - Update to 2.74.0: New Features - Amazon metadata download: Allow downloading from amazon.cn as well. To use go to Preferences->Metadata download and customize the amazon plugin to download from amazon.cn - Edit Book: Allow disabling the 'Files already arranged into folders' message popup Bug Fixes - Edit Book: Fix selected text not being fully highlighted when using the solarized color schemes. - calibredb: Fix CSV output for the check_library command not being properly escaped - Fix subsetting of fonts whose names start with 'and' not working - Fix a regression in 2.72 that broke the --start-in-tray command line option. - Fix third party plugins that create dynamic context menus not working in linux - DOCX Input: Fix images wider than 50% of the page width being incorrectly right aligned even when anchored to the center of the page. - Catalog generation: Ensure all citation keys in BiBTeX catalogs have only ascii characters. - Get Books: Update ebookpoint and legimi plugins for website changes - EPUB3 metadata: Ensure updating metadata never produces empty dc:contributor elements. - DOCX Output: Fix an error when converting tables with spanning cells. - Nicer error message if the user tries to import data while the content server is running - Update to 2.73.0: New Features - Add a preference in Preferences->Look & Feel to hide the row numbers in the main book list. - Allow Export/Import of column coloring and icon rules. - Edit Book: Allow bulk changing of file extension for selected files by right clicking ont he selected files in the file browser. - Edit Book: Check Book: Add a check for nav documents that contain no ToC in EPUB 3 books - Edit Book: Check Book: Add a test to check if the embedded fonts in the book have their embedding permissions enabled Bug Fixes - Pressing the up arrow in an date edit with undefined value should jump to the current date rather than Feb 101 - EPUB Input: When an invalid nav based ToC is used in an EPUB 3.0 document that also has a fallback NCX ToC, use the fallback ToC. - Fix a regression that broke the icon theme creation tool in the previous release - Fix insert character dialog not reflowing characters on resize. Also only allow the search bar in the dialog to get input focus - update to 2.72.0 New Features - Font embedding: Implement automatic embedding for fonts with non-normal stretch and weight values such as Condensed/Light/Extra Bold fonts - Allow aborting an in-progress Copy-to-library action. - Edit Book: When adding a font file via File->New automatically generate the appropriate @font-face rule and copy it to the clipboard so that it can be easily inserted into the appropriate CSS files. - Edit Book: Check Book: Add a warning for links with the : character in them on windows - Conversion: When converting markdown documents recognize basic metadata in the markdown document formatted as per the markdown metadata extension. - Edit Book: Spell Check dialog: Various small usability enhancements -- preserve position in word list on refresh, ensure that new current word is highlighted after changing a word, etc. - Edit Book: Flash the taskbar icon after beautify all files completes. Bug Fixes - Fix creating an empty library with the same structure as current library not creating custom columns on the first restart after creating the new custom columns. - Edit Book: Dont fail to rename files on windows if there is a link containing the colon character. - PDF Output: Dont fail if one of the embedded fonts has no names - Edit Book: When downloading external resources, ensure the generated filenames are valid. - Windows: Fix file extension not being added automatically when missing in save dialogs. - Fix calibre not opening full-screen in windows tablet mode. - Edit Book: Fix check external links tool not detecting changes that have not yet been saved - Generate covers: Fix & in the series causing incorrect formatting of series number. - Edit Book: Fix a regression in the last release that broke the Arrange into folders tool when arranging into sub-folders of a folder that does not exist. - Update to 2.71.0: New Features - calibre's tenth birthday edition! - A new set of icons for calibre - A short video commemorating the occasion: https://youtu.be/Q95NfFKc0v8 - Book details panel: Add a copy all action to the right click menu. Bug Fixes - Get Books: Update ebookpoint and woblink store plugins for website changes - Edit Book: When un-marking text auto-change the 'search where' location to what it was before text was marked rather than 'current file'. - Automatic adding: Show an error if the user specifies a folder whose name starts with a dot or underscore. - OS X: Fix a regression that caused incorrect display of the icon in pop-up message boxes when using a Retina display. - Kobo driver: Fix an error when migrating very old settings - Kobo driver: Fix a regression that broke handling of reading status for devices running old 1.9x versions of the Kobo firmware - Edit Book: When using the arrange into folders tool do not change the case of already existing folders in the book. - Update to version 2.70.0: New Features - Edit Book: Add a tool to download external resources (images/stylesheets/etc.) that are not included in the book. - Make custom columns available in the Alter Tag Browser->Manage categories sub menu Bug Fixes - Conversion: Fix incorrect resolution of references to resources in HTML files that exist in a folder level above the OPF file. This could lead to styles being incorrectly processed in such HTML files. - Get Books: Update the amazon store plugins for website changes - Update ozon.ru metadata download plugin to fix searching for books by ISBN - Edit Book: Fix a regression in the previous release that broke the preferences dialog for changing color schemes. - Edit Book: Better error message when user tries to open a Check Book item that refers to a file that has been deleted since the last time Check Book was run. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-42=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): calibre-2.75.1-4.1 calibre-debuginfo-2.75.1-4.1 calibre-debugsource-2.75.1-4.1 References:

1 0

openSUSE-SU-2017:0061-1: moderate: Security update for php7
by opensuse-security＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Security Update: Security update for php7 ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0061-1 Rating: moderate References: #1015187 #1015188 #1015189 #1015191 Cross-References: CVE-2016-9933 CVE-2016-9934 CVE-2016-9935 CVE-2016-9936 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for php7 fixes the following issues: * CVE-2016-9933 Possible stack overflow on truecolor images handling [bsc#1015187] * CVE-2016-9934 Dereference from NULL pointer could lead to crash [bsc#1015188] * CVE-2016-9935 Invalid read could lead to crash [bsc#1015189] * CVE-2016-9936 Use After free in the function serialize() could lead to crash [bsc#1015191] This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-61=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): apache2-mod_php7-7.0.7-9.1 apache2-mod_php7-debuginfo-7.0.7-9.1 php7-7.0.7-9.1 php7-bcmath-7.0.7-9.1 php7-bcmath-debuginfo-7.0.7-9.1 php7-bz2-7.0.7-9.1 php7-bz2-debuginfo-7.0.7-9.1 php7-calendar-7.0.7-9.1 php7-calendar-debuginfo-7.0.7-9.1 php7-ctype-7.0.7-9.1 php7-ctype-debuginfo-7.0.7-9.1 php7-curl-7.0.7-9.1 php7-curl-debuginfo-7.0.7-9.1 php7-dba-7.0.7-9.1 php7-dba-debuginfo-7.0.7-9.1 php7-debuginfo-7.0.7-9.1 php7-debugsource-7.0.7-9.1 php7-devel-7.0.7-9.1 php7-dom-7.0.7-9.1 php7-dom-debuginfo-7.0.7-9.1 php7-enchant-7.0.7-9.1 php7-enchant-debuginfo-7.0.7-9.1 php7-exif-7.0.7-9.1 php7-exif-debuginfo-7.0.7-9.1 php7-fastcgi-7.0.7-9.1 php7-fastcgi-debuginfo-7.0.7-9.1 php7-fileinfo-7.0.7-9.1 php7-fileinfo-debuginfo-7.0.7-9.1 php7-firebird-7.0.7-9.1 php7-firebird-debuginfo-7.0.7-9.1 php7-fpm-7.0.7-9.1 php7-fpm-debuginfo-7.0.7-9.1 php7-ftp-7.0.7-9.1 php7-ftp-debuginfo-7.0.7-9.1 php7-gd-7.0.7-9.1 php7-gd-debuginfo-7.0.7-9.1 php7-gettext-7.0.7-9.1 php7-gettext-debuginfo-7.0.7-9.1 php7-gmp-7.0.7-9.1 php7-gmp-debuginfo-7.0.7-9.1 php7-iconv-7.0.7-9.1 php7-iconv-debuginfo-7.0.7-9.1 php7-imap-7.0.7-9.1 php7-imap-debuginfo-7.0.7-9.1 php7-intl-7.0.7-9.1 php7-intl-debuginfo-7.0.7-9.1 php7-json-7.0.7-9.1 php7-json-debuginfo-7.0.7-9.1 php7-ldap-7.0.7-9.1 php7-ldap-debuginfo-7.0.7-9.1 php7-mbstring-7.0.7-9.1 php7-mbstring-debuginfo-7.0.7-9.1 php7-mcrypt-7.0.7-9.1 php7-mcrypt-debuginfo-7.0.7-9.1 php7-mysql-7.0.7-9.1 php7-mysql-debuginfo-7.0.7-9.1 php7-odbc-7.0.7-9.1 php7-odbc-debuginfo-7.0.7-9.1 php7-opcache-7.0.7-9.1 php7-opcache-debuginfo-7.0.7-9.1 php7-openssl-7.0.7-9.1 php7-openssl-debuginfo-7.0.7-9.1 php7-pcntl-7.0.7-9.1 php7-pcntl-debuginfo-7.0.7-9.1 php7-pdo-7.0.7-9.1 php7-pdo-debuginfo-7.0.7-9.1 php7-pgsql-7.0.7-9.1 php7-pgsql-debuginfo-7.0.7-9.1 php7-phar-7.0.7-9.1 php7-phar-debuginfo-7.0.7-9.1 php7-posix-7.0.7-9.1 php7-posix-debuginfo-7.0.7-9.1 php7-pspell-7.0.7-9.1 php7-pspell-debuginfo-7.0.7-9.1 php7-readline-7.0.7-9.1 php7-readline-debuginfo-7.0.7-9.1 php7-shmop-7.0.7-9.1 php7-shmop-debuginfo-7.0.7-9.1 php7-snmp-7.0.7-9.1 php7-snmp-debuginfo-7.0.7-9.1 php7-soap-7.0.7-9.1 php7-soap-debuginfo-7.0.7-9.1 php7-sockets-7.0.7-9.1 php7-sockets-debuginfo-7.0.7-9.1 php7-sqlite-7.0.7-9.1 php7-sqlite-debuginfo-7.0.7-9.1 php7-sysvmsg-7.0.7-9.1 php7-sysvmsg-debuginfo-7.0.7-9.1 php7-sysvsem-7.0.7-9.1 php7-sysvsem-debuginfo-7.0.7-9.1 php7-sysvshm-7.0.7-9.1 php7-sysvshm-debuginfo-7.0.7-9.1 php7-tidy-7.0.7-9.1 php7-tidy-debuginfo-7.0.7-9.1 php7-tokenizer-7.0.7-9.1 php7-tokenizer-debuginfo-7.0.7-9.1 php7-wddx-7.0.7-9.1 php7-wddx-debuginfo-7.0.7-9.1 php7-xmlreader-7.0.7-9.1 php7-xmlreader-debuginfo-7.0.7-9.1 php7-xmlrpc-7.0.7-9.1 php7-xmlrpc-debuginfo-7.0.7-9.1 php7-xmlwriter-7.0.7-9.1 php7-xmlwriter-debuginfo-7.0.7-9.1 php7-xsl-7.0.7-9.1 php7-xsl-debuginfo-7.0.7-9.1 php7-zip-7.0.7-9.1 php7-zip-debuginfo-7.0.7-9.1 php7-zlib-7.0.7-9.1 php7-zlib-debuginfo-7.0.7-9.1 - openSUSE Leap 42.2 (noarch): php7-pear-7.0.7-9.1 php7-pear-Archive_Tar-7.0.7-9.1 References: https://www.suse.com/security/cve/CVE-2016-9933.html https://www.suse.com/security/cve/CVE-2016-9934.html https://www.suse.com/security/cve/CVE-2016-9935.html https://www.suse.com/security/cve/CVE-2016-9936.html https://bugzilla.suse.com/1015187 https://bugzilla.suse.com/1015188 https://bugzilla.suse.com/1015189 https://bugzilla.suse.com/1015191

1 0

openSUSE-RU-2017:0060-1: Recommended update for libsolv, libzypp, zypper
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for libsolv, libzypp, zypper ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0060-1 Rating: low References: #1003748 #1004096 #1007273 #1010712 #1010952 #1014265 #731333 #975777 #975794 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has 9 recommended fixes can now be installed. Description: The Software Update Stack was updated to include fixes and enhancements. libsolv: - Rework susetags multi-line handling. (bsc#1007273) - Improve checks against corrupt rpm packages. - Add SOLVER_FLAG_FOCUS_BEST solver flag. libzypp: - Don't raise FileCheckException if user accepted a package with wrong digest. (bsc#1014265) - Also provide the exception history when requesting a media failed. (bsc#1010952) - Let 'dup --from' leave updateTestcase logs in /var/log. (bsc#1004096) - Allow parsing multiple gpgkey= URLs. (bsc#1003748) zypper: - Properly escape patch script output in xml mode. (bsc#1010712) - Show repository priority summary in "zypper lr" output. - Fix German translations. (bsc#975777, bsc#975794) - Do not warn about processes using deleted files when using --root. (bsc#731333) This update was imported from the SUSE:SLE-12-SP2:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-43=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libsolv-debugsource-0.6.24-3.1 libsolv-demo-0.6.24-3.1 libsolv-demo-debuginfo-0.6.24-3.1 libsolv-devel-0.6.24-3.1 libsolv-devel-debuginfo-0.6.24-3.1 libsolv-tools-0.6.24-3.1 libsolv-tools-debuginfo-0.6.24-3.1 libzypp-16.3.2-3.1 libzypp-debuginfo-16.3.2-3.1 libzypp-debugsource-16.3.2-3.1 libzypp-devel-16.3.2-3.1 libzypp-devel-doc-16.3.2-3.1 perl-solv-0.6.24-3.1 perl-solv-debuginfo-0.6.24-3.1 python-solv-0.6.24-3.1 python-solv-debuginfo-0.6.24-3.1 python3-solv-0.6.24-3.1 python3-solv-debuginfo-0.6.24-3.1 ruby-solv-0.6.24-3.1 ruby-solv-debuginfo-0.6.24-3.1 zypper-1.13.14-3.1 zypper-debuginfo-1.13.14-3.1 zypper-debugsource-1.13.14-3.1 - openSUSE Leap 42.2 (noarch): zypper-aptitude-1.13.14-3.1 zypper-log-1.13.14-3.1 References: https://bugzilla.suse.com/1003748 https://bugzilla.suse.com/1004096 https://bugzilla.suse.com/1007273 https://bugzilla.suse.com/1010712 https://bugzilla.suse.com/1010952 https://bugzilla.suse.com/1014265 https://bugzilla.suse.com/731333 https://bugzilla.suse.com/975777 https://bugzilla.suse.com/975794

1 0

openSUSE-RU-2017:0059-1: moderate: Recommended update for libvirt
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for libvirt ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0059-1 Rating: moderate References: #1017189 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for libvirt fixes the following issues: - Add support for VirtualBox 5 (boo#1017189) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-59=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): libvirt-1.2.9-34.1 libvirt-client-1.2.9-34.1 libvirt-client-debuginfo-1.2.9-34.1 libvirt-daemon-1.2.9-34.1 libvirt-daemon-config-network-1.2.9-34.1 libvirt-daemon-config-nwfilter-1.2.9-34.1 libvirt-daemon-debuginfo-1.2.9-34.1 libvirt-daemon-driver-interface-1.2.9-34.1 libvirt-daemon-driver-interface-debuginfo-1.2.9-34.1 libvirt-daemon-driver-lxc-1.2.9-34.1 libvirt-daemon-driver-lxc-debuginfo-1.2.9-34.1 libvirt-daemon-driver-network-1.2.9-34.1 libvirt-daemon-driver-network-debuginfo-1.2.9-34.1 libvirt-daemon-driver-nodedev-1.2.9-34.1 libvirt-daemon-driver-nodedev-debuginfo-1.2.9-34.1 libvirt-daemon-driver-nwfilter-1.2.9-34.1 libvirt-daemon-driver-nwfilter-debuginfo-1.2.9-34.1 libvirt-daemon-driver-qemu-1.2.9-34.1 libvirt-daemon-driver-qemu-debuginfo-1.2.9-34.1 libvirt-daemon-driver-secret-1.2.9-34.1 libvirt-daemon-driver-secret-debuginfo-1.2.9-34.1 libvirt-daemon-driver-storage-1.2.9-34.1 libvirt-daemon-driver-storage-debuginfo-1.2.9-34.1 libvirt-daemon-driver-uml-1.2.9-34.1 libvirt-daemon-driver-uml-debuginfo-1.2.9-34.1 libvirt-daemon-driver-vbox-1.2.9-34.1 libvirt-daemon-driver-vbox-debuginfo-1.2.9-34.1 libvirt-daemon-lxc-1.2.9-34.1 libvirt-daemon-qemu-1.2.9-34.1 libvirt-daemon-uml-1.2.9-34.1 libvirt-daemon-vbox-1.2.9-34.1 libvirt-debugsource-1.2.9-34.1 libvirt-devel-1.2.9-34.1 libvirt-doc-1.2.9-34.1 libvirt-lock-sanlock-1.2.9-34.1 libvirt-lock-sanlock-debuginfo-1.2.9-34.1 libvirt-login-shell-1.2.9-34.1 libvirt-login-shell-debuginfo-1.2.9-34.1 - openSUSE 13.2 (x86_64): libvirt-client-32bit-1.2.9-34.1 libvirt-client-debuginfo-32bit-1.2.9-34.1 libvirt-daemon-driver-libxl-1.2.9-34.1 libvirt-daemon-driver-libxl-debuginfo-1.2.9-34.1 libvirt-daemon-driver-xen-1.2.9-34.1 libvirt-daemon-driver-xen-debuginfo-1.2.9-34.1 libvirt-daemon-xen-1.2.9-34.1 libvirt-devel-32bit-1.2.9-34.1 References: https://bugzilla.suse.com/1017189

1 0

openSUSE-RU-2017:0058-1: Recommended update for pciutils
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for pciutils ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0058-1 Rating: low References: #1006827 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for pciutils provides the following fixes: - Enable proper support for 32-bit PCI domain numbers. (bsc#1006827) This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-40=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-40=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): libpci3-3.2.1-14.1 libpci3-debuginfo-3.2.1-14.1 pciutils-3.2.1-14.1 pciutils-debuginfo-3.2.1-14.1 pciutils-debugsource-3.2.1-14.1 pciutils-devel-3.2.1-14.1 - openSUSE Leap 42.2 (x86_64): libpci3-32bit-3.2.1-14.1 libpci3-debuginfo-32bit-3.2.1-14.1 pciutils-devel-32bit-3.2.1-14.1 - openSUSE Leap 42.1 (i586 x86_64): libpci3-3.2.1-13.1 libpci3-debuginfo-3.2.1-13.1 pciutils-3.2.1-13.1 pciutils-debuginfo-3.2.1-13.1 pciutils-debugsource-3.2.1-13.1 pciutils-devel-3.2.1-13.1 - openSUSE Leap 42.1 (x86_64): libpci3-32bit-3.2.1-13.1 libpci3-debuginfo-32bit-3.2.1-13.1 pciutils-devel-32bit-3.2.1-13.1 References: https://bugzilla.suse.com/1006827

1 0

openSUSE-RU-2017:0057-1: Recommended update for irqbalance
by maintenance＠opensuse.org 08 Jan '17

08 Jan '17

openSUSE Recommended Update: Recommended update for irqbalance ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0057-1 Rating: low References: #998399 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for irqbalance increases the maximum number of files that can be opened simultaneously to 4096. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-54=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-54=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): irqbalance-1.1.0-4.1 irqbalance-debuginfo-1.1.0-4.1 irqbalance-debugsource-1.1.0-4.1 - openSUSE Leap 42.1 (x86_64): irqbalance-1.0.7-12.1 irqbalance-debuginfo-1.0.7-12.1 irqbalance-debugsource-1.0.7-12.1 References: https://bugzilla.suse.com/998399

1 0