January 2017 - openSUSE Updates - openSUSE Mailing Lists

openSUSE-RU-2017:0147-1: Recommended update for dirmngr
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for dirmngr ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0147-1 Rating: low References: #994794 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for dirmngr enables support for daemon mode. This update was imported from the SUSE:SLE-12:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-98=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): dirmngr-1.1.1-11.1 dirmngr-debuginfo-1.1.1-11.1 dirmngr-debugsource-1.1.1-11.1 - openSUSE Leap 42.2 (noarch): dirmngr-lang-1.1.1-11.1 References: https://bugzilla.suse.com/994794

1 0

openSUSE-SU-2017:0146-1: important: Security update for icinga
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for icinga ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0146-1 Rating: important References: #1014637 #952777 Cross-References: CVE-2015-8010 CVE-2016-9566 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: This update for icinga includes various upstream fixes and the following security security fixes: - icinga was updated to version 1.14.0 - the classic-UI was vulnerable to a cross site scripting attack (CVE-2015-8010, boo#952777) - A user with nagios privileges could have gained root privileges by placing a symbolic link at the logfile location (CVE-2016-9566, boo#1014637) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-100=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-100=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): icinga-1.14.0-4.1 icinga-debuginfo-1.14.0-4.1 icinga-debugsource-1.14.0-4.1 icinga-devel-1.14.0-4.1 icinga-doc-1.14.0-4.1 icinga-idoutils-1.14.0-4.1 icinga-idoutils-debuginfo-1.14.0-4.1 icinga-idoutils-mysql-1.14.0-4.1 icinga-idoutils-oracle-1.14.0-4.1 icinga-idoutils-pgsql-1.14.0-4.1 icinga-plugins-downtimes-1.14.0-4.1 icinga-plugins-eventhandlers-1.14.0-4.1 icinga-www-1.14.0-4.1 icinga-www-config-1.14.0-4.1 icinga-www-debuginfo-1.14.0-4.1 monitoring-tools-1.14.0-4.1 monitoring-tools-debuginfo-1.14.0-4.1 - openSUSE Leap 42.1 (i586 x86_64): icinga-1.14.0-3.1 icinga-debuginfo-1.14.0-3.1 icinga-debugsource-1.14.0-3.1 icinga-devel-1.14.0-3.1 icinga-doc-1.14.0-3.1 icinga-idoutils-1.14.0-3.1 icinga-idoutils-debuginfo-1.14.0-3.1 icinga-idoutils-mysql-1.14.0-3.1 icinga-idoutils-oracle-1.14.0-3.1 icinga-idoutils-pgsql-1.14.0-3.1 icinga-plugins-downtimes-1.14.0-3.1 icinga-plugins-eventhandlers-1.14.0-3.1 icinga-www-1.14.0-3.1 icinga-www-config-1.14.0-3.1 icinga-www-debuginfo-1.14.0-3.1 monitoring-tools-1.14.0-3.1 monitoring-tools-debuginfo-1.14.0-3.1 References: https://www.suse.com/security/cve/CVE-2015-8010.html https://www.suse.com/security/cve/CVE-2016-9566.html https://bugzilla.suse.com/1014637 https://bugzilla.suse.com/952777

1 0

openSUSE-SU-2017:0145-1: moderate: Security update for gstreamer-0_10-plugins-base
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for gstreamer-0_10-plugins-base ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0145-1 Rating: moderate References: #1013669 Cross-References: CVE-2016-9811 Affected Products: openSUSE 13.2 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for gstreamer-0_10-plugins-base fixes the following issue: - CVE-2016-9811: out of bounds memory read in windows_icon_typefind (bsc#1013669) ---------- Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.2: zypper in -t patch openSUSE-2017-89=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.2 (i586 x86_64): gstreamer-0_10-plugin-gnomevfs-0.10.36-11.3.1 gstreamer-0_10-plugin-gnomevfs-debuginfo-0.10.36-11.3.1 gstreamer-0_10-plugins-base-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debuginfo-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debugsource-0.10.36-11.3.1 gstreamer-0_10-plugins-base-devel-0.10.36-11.3.1 gstreamer-0_10-plugins-base-doc-0.10.36-11.3.1 libgstapp-0_10-0-0.10.36-11.3.1 libgstapp-0_10-0-debuginfo-0.10.36-11.3.1 libgstinterfaces-0_10-0-0.10.36-11.3.1 libgstinterfaces-0_10-0-debuginfo-0.10.36-11.3.1 typelib-1_0-GstApp-0_10-0.10.36-11.3.1 typelib-1_0-GstInterfaces-0_10-0.10.36-11.3.1 - openSUSE 13.2 (noarch): gstreamer-0_10-plugins-base-lang-0.10.36-11.3.1 - openSUSE 13.2 (x86_64): gstreamer-0_10-plugins-base-32bit-0.10.36-11.3.1 gstreamer-0_10-plugins-base-debuginfo-32bit-0.10.36-11.3.1 libgstapp-0_10-0-32bit-0.10.36-11.3.1 libgstapp-0_10-0-debuginfo-32bit-0.10.36-11.3.1 libgstinterfaces-0_10-0-32bit-0.10.36-11.3.1 libgstinterfaces-0_10-0-debuginfo-32bit-0.10.36-11.3.1 References: https://www.suse.com/security/cve/CVE-2016-9811.html https://bugzilla.suse.com/1013669

1 0

openSUSE-RU-2017:0144-1: moderate: Recommended update for sysdig
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for sysdig ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0144-1 Rating: moderate References: #1017181 Affected Products: SUSE Package Hub for SUSE Linux Enterprise 12 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for sysdig fixes the following issues: - Update to version 0.13.0 (boo#1017181): - Add ability to open concatenated capture files. - evtin.* fields can be used also for displaying now. - Fix driver for Kernel 4.9. - Fix on IPv4 mapped IPv6 parsing. - Fix memory leak #694. - Fix issue #687 about connecting to an K8s API server via HTTPS. - Fix compilation issues when using non-bundled OpenSSL #672. - Fix compilation issues under S390 architecture. - Fix various issues on k8s parsing. - Fix stale thread info when parsing processes within containers. (#665) - Avoid getting cwd from driver, causes issues on Kernel 4.8. - Add new filters container.mount.* to match container mount points. - Add new filter container.privileged to match containers running in privileged mode. - Add support for latest kubernetes features: k8s.deployment.* and k8s.rs.* filters are now available. - Added glob operator for strings, works as classic shell glob path matcher. - Added pmatch operator. - Add less package on docker image. - Enable building on s390x. - Use current macros for KMP building. - Drop sysdig-kmp-preamble. - Use exclusivearch instead of excluding architectures. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Package Hub for SUSE Linux Enterprise 12: zypper in -t patch openSUSE-2017-90=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Package Hub for SUSE Linux Enterprise 12 (s390x x86_64): sysdig-0.13.0-8.1 sysdig-kmp-default-0.13.0_k3.12.49_11-8.1 - SUSE Package Hub for SUSE Linux Enterprise 12 (x86_64): sysdig-kmp-xen-0.13.0_k3.12.49_11-8.1 References: https://bugzilla.suse.com/1017181

1 0

openSUSE-RU-2017:0143-1: moderate: Recommended update for dracut
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for dracut ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0143-1 Rating: moderate References: #1007648 #908143 #915218 #975404 #995812 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that has 5 recommended fixes can now be installed. Description: This update for dracut fixes the following issues: - Set persistent policy to by-path on s390 platforms to prevent the system from hanging during boot when vDISKs are used as swap devices. (bsc#915218) - Correctly handle incomplete ibft bootflag settings. (bsc#1007648) - Do not pass ifname for bonding devices. (bsc#995812) - Give persistent policy precedence over dev mapper names. (bsc#908143) - Fix mdadm doesn't assemble RSTe array in kdump. (bsc#975404) This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-96=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): dracut-037-77.1 dracut-debuginfo-037-77.1 dracut-debugsource-037-77.1 dracut-fips-037-77.1 References: https://bugzilla.suse.com/1007648 https://bugzilla.suse.com/908143 https://bugzilla.suse.com/915218 https://bugzilla.suse.com/975404 https://bugzilla.suse.com/995812

1 0

openSUSE-SU-2017:0141-1: important: Security update for gstreamer-plugins-good
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for gstreamer-plugins-good ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0141-1 Rating: important References: #1012102 #1012103 #1012104 #1013653 #1013655 #1013663 Cross-References: CVE-2016-9634 CVE-2016-9635 CVE-2016-9636 CVE-2016-9807 CVE-2016-9808 CVE-2016-9810 Affected Products: openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes 6 vulnerabilities is now available. Description: This update for gstreamer-plugins-good fixes the following issues: - CVE-2016-9634: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012102) - CVE-2016-9635: Invalid FLIC files could have caused and an out-of-bounds write (bsc#1012103) - CVE-2016-9636: Prevent maliciously crafted flic files from causing invalid memory writes (bsc#1012104) - CVE-2016-9807: Prevent the reading of invalid memory in flx_decode_chunks, leading to DoS (bsc#1013655) - CVE-2016-9808: Prevent maliciously crafted flic files from causing invalid memory accesses (bsc#1013653) - CVE-2016-9810: Invalid files can be used to extraneous unreferences, leading to invalid memory access and DoS (bsc#1013663) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-93=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gstreamer-plugins-good-1.4.5-5.1 gstreamer-plugins-good-debuginfo-1.4.5-5.1 gstreamer-plugins-good-debugsource-1.4.5-5.1 gstreamer-plugins-good-doc-1.4.5-5.1 gstreamer-plugins-good-extra-1.4.5-5.1 gstreamer-plugins-good-extra-debuginfo-1.4.5-5.1 - openSUSE Leap 42.1 (x86_64): gstreamer-plugins-good-32bit-1.4.5-5.1 gstreamer-plugins-good-debuginfo-32bit-1.4.5-5.1 gstreamer-plugins-good-extra-32bit-1.4.5-5.1 gstreamer-plugins-good-extra-debuginfo-32bit-1.4.5-5.1 - openSUSE Leap 42.1 (noarch): gstreamer-plugins-good-lang-1.4.5-5.1 References: https://www.suse.com/security/cve/CVE-2016-9634.html https://www.suse.com/security/cve/CVE-2016-9635.html https://www.suse.com/security/cve/CVE-2016-9636.html https://www.suse.com/security/cve/CVE-2016-9807.html https://www.suse.com/security/cve/CVE-2016-9808.html https://www.suse.com/security/cve/CVE-2016-9810.html https://bugzilla.suse.com/1012102 https://bugzilla.suse.com/1012103 https://bugzilla.suse.com/1012104 https://bugzilla.suse.com/1013653 https://bugzilla.suse.com/1013655 https://bugzilla.suse.com/1013663

1 0

openSUSE-SU-2017:0140-1: Security update for ark
by opensuse-security＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Security Update: Security update for ark ______________________________________________________________________________ Announcement ID: openSUSE-SU-2017:0140-1 Rating: low References: #1018648 Cross-References: CVE-2017-5330 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for ark fixes the following issues: - CVE-2017-5330: ark could run executable scripts when clicking on them (boo#1018648) Patch Instructions: To install this openSUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-92=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-92=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (i586 x86_64): ark-16.08.2-3.1 ark-debuginfo-16.08.2-3.1 ark-debugsource-16.08.2-3.1 libkerfuffle16-16.08.2-3.1 libkerfuffle16-debuginfo-16.08.2-3.1 - openSUSE Leap 42.1 (i586 x86_64): ark-15.12.3-18.1 ark-debuginfo-15.12.3-18.1 ark-debugsource-15.12.3-18.1 libkerfuffle15-15.12.3-18.1 libkerfuffle15-debuginfo-15.12.3-18.1 References: https://www.suse.com/security/cve/CVE-2017-5330.html https://bugzilla.suse.com/1018648

1 0

openSUSE-RU-2017:0139-1: moderate: Recommended update for sblim-sfcb
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for sblim-sfcb ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0139-1 Rating: moderate References: #1008130 #1015155 #923349 Affected Products: openSUSE Leap 42.2 openSUSE Leap 42.1 ______________________________________________________________________________ An update that has three recommended fixes can now be installed. Description: This update for sblim-sfcb fixes the following issues: - Potential segmentation fault due to un-initialized memory access. (bsc#1015155) - Add support for text/xml mimetype. - Do not overwrite configuration file on upgrades. - Some associatorname CIM operations could hang. - CMPIRole not passed to provider context. - Add sslNoSSLv3 and sslNoTLSv1 configuration options. (bsc#923349, bsc#1008130) Please restart the service after applying the update. This update was imported from the SUSE:SLE-12-SP1:Update update project. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-91=1 - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-91=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (x86_64): sblim-sfcb-1.4.8-4.1 sblim-sfcb-debuginfo-1.4.8-4.1 sblim-sfcb-debugsource-1.4.8-4.1 - openSUSE Leap 42.1 (i586 x86_64): sblim-sfcb-1.4.8-3.1 sblim-sfcb-debuginfo-1.4.8-3.1 sblim-sfcb-debugsource-1.4.8-3.1 References: https://bugzilla.suse.com/1008130 https://bugzilla.suse.com/1015155 https://bugzilla.suse.com/923349

1 0

openSUSE-RU-2017:0137-1: moderate: Recommended update for gdk-pixbuf
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for gdk-pixbuf ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0137-1 Rating: moderate References: #1010497 #929462 Affected Products: openSUSE Leap 42.1 openSUSE 13.2 ______________________________________________________________________________ An update that has two recommended fixes can now be installed. Description: This update for gdk-pixbuf fixes the following issues: - issues in RGBA conversion for big endian X11 environments (boo#929462), (boo#1010497) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.1: zypper in -t patch openSUSE-2017-79=1 - openSUSE 13.2: zypper in -t patch openSUSE-2017-79=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.1 (i586 x86_64): gdk-pixbuf-debugsource-2.32.3-12.1 gdk-pixbuf-devel-2.32.3-12.1 gdk-pixbuf-devel-debuginfo-2.32.3-12.1 gdk-pixbuf-query-loaders-2.32.3-12.1 gdk-pixbuf-query-loaders-debuginfo-2.32.3-12.1 libgdk_pixbuf-2_0-0-2.32.3-12.1 libgdk_pixbuf-2_0-0-debuginfo-2.32.3-12.1 typelib-1_0-GdkPixbuf-2_0-2.32.3-12.1 - openSUSE Leap 42.1 (x86_64): gdk-pixbuf-devel-32bit-2.32.3-12.1 gdk-pixbuf-devel-debuginfo-32bit-2.32.3-12.1 gdk-pixbuf-query-loaders-32bit-2.32.3-12.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.32.3-12.1 libgdk_pixbuf-2_0-0-32bit-2.32.3-12.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.32.3-12.1 - openSUSE Leap 42.1 (noarch): gdk-pixbuf-lang-2.32.3-12.1 - openSUSE 13.2 (i586 x86_64): gdk-pixbuf-debugsource-2.32.3-13.1 gdk-pixbuf-devel-2.32.3-13.1 gdk-pixbuf-devel-debuginfo-2.32.3-13.1 gdk-pixbuf-query-loaders-2.32.3-13.1 gdk-pixbuf-query-loaders-debuginfo-2.32.3-13.1 libgdk_pixbuf-2_0-0-2.32.3-13.1 libgdk_pixbuf-2_0-0-debuginfo-2.32.3-13.1 typelib-1_0-GdkPixbuf-2_0-2.32.3-13.1 - openSUSE 13.2 (x86_64): gdk-pixbuf-devel-32bit-2.32.3-13.1 gdk-pixbuf-devel-debuginfo-32bit-2.32.3-13.1 gdk-pixbuf-query-loaders-32bit-2.32.3-13.1 gdk-pixbuf-query-loaders-debuginfo-32bit-2.32.3-13.1 libgdk_pixbuf-2_0-0-32bit-2.32.3-13.1 libgdk_pixbuf-2_0-0-debuginfo-32bit-2.32.3-13.1 - openSUSE 13.2 (noarch): gdk-pixbuf-lang-2.32.3-13.1 References: https://bugzilla.suse.com/1010497 https://bugzilla.suse.com/929462

1 0

openSUSE-RU-2017:0136-1: moderate: Recommended update for spice-gtk
by maintenance＠opensuse.org 16 Jan '17

16 Jan '17

openSUSE Recommended Update: Recommended update for spice-gtk ______________________________________________________________________________ Announcement ID: openSUSE-RU-2017:0136-1 Rating: moderate References: #1016291 Affected Products: openSUSE Leap 42.2 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update for spice-gtk fixes the following issues: - numlocks / capslocks problems when redirecting keyboard (boo#1016291) Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE Leap 42.2: zypper in -t patch openSUSE-2017-78=1 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE Leap 42.2 (noarch): spice-gtk-lang-0.31-4.1 - openSUSE Leap 42.2 (x86_64): libspice-client-glib-2_0-8-0.31-4.1 libspice-client-glib-2_0-8-debuginfo-0.31-4.1 libspice-client-glib-helper-0.31-4.1 libspice-client-glib-helper-debuginfo-0.31-4.1 libspice-client-gtk-2_0-4-0.31-4.1 libspice-client-gtk-2_0-4-debuginfo-0.31-4.1 libspice-client-gtk-3_0-4-0.31-4.1 libspice-client-gtk-3_0-4-debuginfo-0.31-4.1 libspice-controller0-0.31-4.1 libspice-controller0-debuginfo-0.31-4.1 python-SpiceClientGtk-0.31-4.1 python-SpiceClientGtk-debuginfo-0.31-4.1 spice-gtk-0.31-4.1 spice-gtk-debuginfo-0.31-4.1 spice-gtk-debugsource-0.31-4.1 spice-gtk-devel-0.31-4.1 typelib-1_0-SpiceClientGlib-2_0-0.31-4.1 typelib-1_0-SpiceClientGtk-2_0-0.31-4.1 typelib-1_0-SpiceClientGtk-3_0-0.31-4.1 References: https://bugzilla.suse.com/1016291

1 0